[Unit]
Description=Genarrative Pingora Shadow Gateway
After=network-online.target genarrative-api.service spacetimedb.service
Wants=network-online.target
Requires=genarrative-api.service spacetimedb.service

[Service]
Type=simple
User=genarrative
Group=genarrative
WorkingDirectory=/opt/genarrative/current
EnvironmentFile=/etc/genarrative/pingora-gateway.env
ExecStartPre=/usr/bin/test -d /srv/genarrative/web
ExecStartPre=/usr/bin/test -d /var/www/html
ExecStart=/opt/genarrative/current/pingora-gateway
Restart=always
RestartSec=5
KillSignal=SIGINT
TimeoutStopSec=60
LimitNOFILE=65535
TasksMax=2048

# 影子网关只监听本机高端口，公网入口继续由 Nginx 承接。
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ReadOnlyPaths=/srv/genarrative/web /var/www/html
ReadWritePaths=/var/lib/genarrative /var/log/genarrative

[Install]
WantedBy=multi-user.target