[Unit]
Description=AnythingLLM Server
Documentation=https://docs.anythingllm.com
After=network.target postgresql.service
Wants=anythingllm-collector.service

[Service]
Type=simple
User={{ anythingllm_user }}
Group={{ anythingllm_group }}
WorkingDirectory={{ anythingllm_directory }}/app/server
Environment=NODE_ENV=production
Environment=SERVER_PORT={{ anythingllm_port }}
ExecStart=/usr/bin/node index.js
Restart=on-failure
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=anythingllm-server

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths={{ anythingllm_directory }}

[Install]
WantedBy=multi-user.target