[Unit]
Description=Verae TestFlight invite enrollment (ASC API)
After=network.target

[Service]
Type=simple
User=marchon
Group=marchon
WorkingDirectory=/SSD2/services/verae-testflight-enroll
EnvironmentFile=-/SSD2/secrets/asc/testflight-enroll.env
ExecStart=/SSD2/services/verae-testflight-enroll/venv/bin/python /SSD2/services/verae-testflight-enroll/enroll_server.py
Restart=on-failure
RestartSec=3
# Do not leak secrets into journal via argv
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target