From 06c75096475ed5e6b8ef4898814d05a2ea84be04 Mon Sep 17 00:00:00 2001
From: rekushi <1+rekushi@noreply.flipnote.world>
Date: Thu, 29 Oct 2026 04:40:19 +0000
Subject: [PATCH] feat(deploy): add an example systemd service

Provide a dedicated-user service with automatic restart and restricted file permissions.
---
 deploy/reximemo-ose.service | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)
 create mode 100644 deploy/reximemo-ose.service

diff --git a/deploy/reximemo-ose.service b/deploy/reximemo-ose.service
new file mode 100644
index 0000000..84693be
--- /dev/null
+++ b/deploy/reximemo-ose.service
@@ -0,0 +1,21 @@
+[Unit]
+Description=RexiMemo Open Source Edition
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=reximemo-ose
+Group=reximemo-ose
+WorkingDirectory=/opt/reximemo-ose
+ExecStart=/opt/reximemo-ose/.venv/bin/python -u /opt/reximemo-ose/server.py
+Restart=on-failure
+RestartSec=5
+Environment=PYTHONUNBUFFERED=1
+Environment=PYTHONDONTWRITEBYTECODE=1
+NoNewPrivileges=true
+PrivateTmp=true
+UMask=0027
+
+[Install]
+WantedBy=multi-user.target