# /etc/systemd/system/forge.service
# Install: sudo cp forge.service /etc/systemd/system/
# Enable:  sudo systemctl enable --now forge
# Logs:    journalctl -u forge -f

[Unit]
Description=Forge AI Agent Server
After=network.target

[Service]
Type=simple
User=forge
Group=forge
WorkingDirectory=/opt/forge
Environment=NODE_ENV=production
Environment=PORT=3000
Environment=HOSTNAME=0.0.0.0
Environment=FORGE_DATA_DIR=/opt/forge-data
Environment=FORGE_WORKSPACES_ROOT=/opt/forge/workspaces
ExecStart=/usr/bin/node /opt/forge/server.js
Restart=on-failure
RestartSec=5

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/opt/forge-data /opt/forge/workspaces /tmp

[Install]
WantedBy=multi-user.target