[Unit]
Description=PAC Web (Next.js production)
After=network.target pac-service.service

[Service]
Type=simple
User=pac
Group=pac
WorkingDirectory=/opt/pac/apps/pac-web
EnvironmentFile=/opt/pac/apps/pac-web/.env
ExecStart=/usr/bin/pnpm start
Restart=on-failure
RestartSec=5s
StandardOutput=append:/var/log/pac/pac-web.log
StandardError=append:/var/log/pac/pac-web.error.log

NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true

[Install]
WantedBy=multi-user.target
