[Unit]
Description=Voicemail API (JSON backend for React portal)
After=network.target mysql.service
Wants=mysql.service

[Service]
Type=simple
User=asterisk
Group=asterisk
WorkingDirectory=/opt/vm-transcribe
ExecStart=/opt/vm-transcribe/venv/bin/uvicorn vm_api:app --host 127.0.0.1 --port 8098 --workers 2
Restart=on-failure
RestartSec=5
Environment=VM_SESSION_HOURS=12
EnvironmentFile=-/opt/vm-transcribe/api.env

# Hardening
ProtectSystem=full
ProtectHome=read-only
NoNewPrivileges=true
PrivateTmp=true
IPAddressAllow=127.0.0.1

[Install]
WantedBy=multi-user.target