[Unit]
Description=Arke MCP Server
After=network.target
Wants=network.target

[Service]
Type=simple
User={{arke_user}}
Group={{arke_group}}
WorkingDirectory={{arke_directory}}
EnvironmentFile={{arke_directory}}/.env
ExecStart={{arke_directory}}/.venv/bin/python {{arke_directory}}/arke.py

Restart=always
RestartSec=10

# Security
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true

[Install]
WantedBy=multi-user.target