[Unit]
Description=Verae MCP timestamping server (Go shadow)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=verae-mcp
Group=verae-mcp
WorkingDirectory=/opt/verae/verae-mcp-timestamping-server-go
Environment=HOME=/var/lib/verae-mcp
Environment=VERAE_MCP_TRANSPORT=streamable-http
Environment=VERAE_MCP_HOST=127.0.0.1
Environment=VERAE_MCP_PORT=8001
Environment=VERAE_NATS_LISTEN=127.0.0.1:4223
Environment=VERAE_MCP_REQUIRE_BEARER=0
ExecStart=/opt/verae/verae-mcp-timestamping-server-go/bin/verae-mcp-timestamping-server
Restart=on-failure
RestartSec=2
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/verae-mcp
PrivateTmp=true

[Install]
WantedBy=multi-user.target