[Unit]
Description=Bitcoin Signet ClamAV API
After=network.target

[Service]
Type=simple
User=ncantu
WorkingDirectory=/home/ncantu/Bureau/code/bitcoin/api-clamav
Environment=NODE_ENV=production
Environment=CLAMAV_API_PORT=3023
# Bind IPv4 only: machine prod (192.168.1.103). Accept only from proxy 192.168.1.100.
Environment=CLAMAV_API_HOST=192.168.1.103
Environment=ALLOWED_SOURCE_IP=192.168.1.100
Environment=CLAMAV_HOST=localhost
Environment=CLAMAV_PORT=3310
ExecStart=/usr/bin/node /home/ncantu/Bureau/code/bitcoin/api-clamav/src/server.js
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal

# Sécurité
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target