[Unit]
Description=MCP IMAP Agent - Email automation server for N8N
After=network.target

[Service]
Type=simple
User=www-data
WorkingDirectory=/opt/mcp-imap-agent/backend
Environment="PATH=/opt/mcp-imap-agent/backend/venv/bin"
EnvironmentFile=/opt/mcp-imap-agent/backend/.env
ExecStart=/opt/mcp-imap-agent/backend/venv/bin/python src/mcp_server.py
Restart=always
RestartSec=10
StandardOutput=journal
StandardError=journal

# Security hardening
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/mcp-imap-agent/backend

[Install]
WantedBy=multi-user.target