[Unit] Description=Passlabb booking app After=network.target postgresql.service Wants=postgresql.service [Service] Type=simple User=passlabb WorkingDirectory=/srv/passlabb/app EnvironmentFile=/srv/passlabb/app/.env ExecStart=/usr/bin/node src/server.mjs Restart=always RestartSec=3 # Hardening NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true ReadWritePaths=/srv/passlabb/app/uploads MemoryMax=600M [Install] WantedBy=multi-user.target