[Unit]
Description=Rust Backend Blue (Active)
After=network.target postgresql.service
Wants=network.target

[Service]
Type=simple
User=rust-backend
Group=rust-backend
WorkingDirectory=/root/rust/rust_backend_blue
ExecStart=/root/rust/rust_backend_blue/rust-backend
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal

Environment=DATABASE_URL=postgres://milkydata:44n6FdB8CdDAk5rk@127.0.0.1:5432/milkydata
Environment=WECHAT_APPID=wx5b00eb90621802f7
Environment=WECHAT_SECRET=494efc513faa310bfba588bda2849bfd
Environment=JWT_SECRET=tribesman-pavestone-hatchling-wrangle-silly-embargo
Environment=SSL_KEY_PATH=/etc/ssl/rust_backend/privkey.pem
Environment=SSL_CERT_PATH=/etc/ssl/rust_backend/fullchain.pem
Environment=RUST_LOG=info
Environment=APP_VERSION=0.3.0
Environment=FREE_USER_DATA_LIMIT=20
EnvironmentFile=/root/rust/rust_backend_blue/.env
Environment=APP_BASE_URL=https://xmclassmate.top
Environment=SERVER_PORT=4433
Environment=SENTRY_DSN=http://f02c7cce1dc746e2ad41b11397dab0db@127.0.0.1:9000/1

NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/root/rust/rust_backend_blue

SyslogIdentifier=rust-backend-blue

[Install]
WantedBy=multi-user.target