[Unit]
Description=1me rednote H5 - isolated browser identities
After=network.target

[Service]
Type=simple
User=ubuntu
WorkingDirectory=/home/ubuntu/juzi-rednote/current/h5
Environment=JUZI_ENTRY_MODE=rednote
Environment=NODE_ENV=production
Environment=HOST=127.0.0.1
Environment=PORT=8081
Environment=PUBLIC_BASE_URL=https://1me.xajuzi.com/rednote/
Environment=JUZI_DATA_ROOT=/home/ubuntu/juzi-rednote-data
Environment=JUZI_PROTECTED_DATA_ROOT=/home/ubuntu/juzi/h5/data
Environment=TRUST_LOOPBACK_PROXY=1
EnvironmentFile=/etc/juzi/rednote.env
ExecStart=/usr/bin/node /home/ubuntu/juzi-rednote/current/h5/server.js
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ReadOnlyPaths=/home/ubuntu/juzi
UMask=0077

[Install]
WantedBy=multi-user.target