[Unit]
Description=Lumbridge Bench — model evaluation and serving evidence
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=ubuntu
WorkingDirectory=/home/ubuntu/workspace/lumbridge-bench/site
Environment=NODE_ENV=production
Environment=PORT=8909
EnvironmentFile=/home/ubuntu/workspace/lumbridge-bench/site/.env.local
ExecStart=/usr/bin/npm run start
Restart=always
RestartSec=3

# The site only ever reads results/ and writes nothing to disk.
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/home/ubuntu/workspace/lumbridge-bench/site/.next

[Install]
WantedBy=multi-user.target