[Unit]
Description=Lingniu Public Hydrogen Station Navigation
After=network-online.target lingniu-vehicle-open-platform.service
Wants=network-online.target

[Service]
Type=simple
User=station-navigation
Group=station-navigation
# The public process needs read-only access to the operations map's shared
# logo and stylesheet.  Its own release remains owned by station-navigation.
SupplementaryGroups=vehicle-map
WorkingDirectory=/opt/lingniu-station-navigation/current
# Reuse the operations map's existing Open Platform credential; the public
# service still returns only the station-directory allowlist in server.py.
EnvironmentFile=/opt/lingniu-vehicle-map/env/vehicle-map.env
Environment=STATION_NAVIGATION_HOST=0.0.0.0
Environment=STATION_NAVIGATION_PORT=20804
Environment=STATION_NAVIGATION_CACHE_SECONDS=120
Environment=VEHICLE_MAP_ASSET_ROOT=/opt/lingniu-vehicle-map/current
ExecStart=/usr/bin/python3 /opt/lingniu-station-navigation/current/server.py
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

[Install]
WantedBy=multi-user.target