[Unit]
Description=Task Dashboard - Personal task aggregation dashboard
After=network.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/site/%i
ExecStart=/site/%i/app
Restart=always
RestartSec=5

# Environment file for secrets and configuration
EnvironmentFile=/site/%i/.env

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/site/%i/data
PrivateTmp=true

[Install]
WantedBy=multi-user.target