[Unit]
Description=Homey MCP Server (LAN mode for Odysseus)
After=network.target
Wants=network.target

[Service]
Type=simple
User=%i
WorkingDirectory=%h/homey-mcp
ExecStart=%h/homey-mcp/run-lan.sh
Environment=HOMEY_MCP_TRANSPORT=streamable-http
Environment=HOMEY_MCP_HOST=0.0.0.0
Environment=HOMEY_MCP_PORT=8080
EnvironmentFile=%h/homey-mcp/.env
Restart=on-failure
RestartSec=5
StandardOutput=journal
StandardError=journal

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=%h/homey-mcp
ProtectHome=read-only

[Install]
WantedBy=multi-user.target