[Unit]
Description=GeoIP Country Pre-Scanner Daemon
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=www-data
Group=www-data
WorkingDirectory=/opt/geoip_block_generator

EnvironmentFile=/opt/geoip_block_generator/.env

# Python executable
ExecStart=/opt/geoip_block_generator/venv/bin/python /opt/geoip_block_generator/scheduler.py

# Restart policy
Restart=always
RestartSec=10

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=geoip-scheduler

# Security
PrivateTmp=true
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/geoip_block_generator/geoip_db

[Install]
WantedBy=multi-user.target