[Unit]
Description=Weronika & Rafal - odbiornik zdjec (domowy serwer)
After=network.target

[Service]
Type=simple
User=USER
Group=USER
WorkingDirectory=/opt/weronikairafal-home
Environment="WR_HOME_SECRET=WSTAW_WSPOLNY_SEKRET"
Environment="WR_ARCHIVE_DIR=/opt/weronikairafal-home/archive"
# Bind TYLKO na adres WireGuard (nie wystawiaj na LAN/WAN):
ExecStart=/opt/weronikairafal-home/venv/bin/gunicorn --workers 2 --bind 10.50.0.2:8021 receiver:app
Restart=on-failure
RestartSec=3

[Install]
WantedBy=multi-user.target