[Unit]
Description=ECM Control GPIO Service
After=network.target
Wants=network.target

[Service]
Type=simple
User=pi
Group=pi
WorkingDirectory=/home/pi/ecm-control
Environment=PATH=/home/pi/ecm-control/.venv/bin
ExecStart=/home/pi/ecm-control/.venv/bin/python -m ecm_control.gpio
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal

# Security settings
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/home/pi/ecm-control

# Environment variables
Environment=PYTHONPATH=/home/pi/ecm-control/src
Environment=LOG_LEVEL=INFO

[Install]
WantedBy=multi-user.target