[Unit]
Description=EPI-Support Monitor – Web-Dashboard (gunicorn)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/var/www/html/episupport
EnvironmentFile=/var/www/html/episupport/.env
ExecStart=/var/www/html/episupport/venv/bin/python -m gunicorn \
    --workers 2 \
    --bind 127.0.0.1:8071 \
    --access-logfile - \
    --error-logfile - \
    wsgi:app
Restart=on-failure
RestartSec=5

# Härtung
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ReadWritePaths=/var/www/html/episupport/data

[Install]
WantedBy=multi-user.target