[Unit]
Description=DeepDrft Manager — Blazor InteractiveServer CMS
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
Restart=always
RestartSec=5

WorkingDirectory=%h/manager/bin
ExecStart=%h/manager/bin/DeepDrftManager

# Non-secret config — hardcoded; no plaintext file needed.
Environment=ASPNETCORE_ENVIRONMENT=Production
Environment=ASPNETCORE_URLS=http://localhost:5001

# Secrets — loaded at startup into $CREDENTIALS_DIRECTORY/.
# File lives at %h/.config/credentials/ (deepdrft:deepdrft 600).
# LoadCredential id 'api' must match CredentialTools.ResolvePathOrThrow("api", ...) key.
LoadCredential=api:%h/.config/credentials/api-manager.json

# Forward headers are configured in Program.cs for the nginx proxy topology.

StandardOutput=journal
StandardError=journal
SyslogIdentifier=deepdrftmanager

[Install]
WantedBy=default.target