[Unit] Description=SOY NV AI Flask Application After=network.target ollama.service Requires=network.target [Service] Type=simple User=deploy Group=deploy WorkingDirectory=/var/www/soy-nv-ai Environment="PATH=/var/www/soy-nv-ai/venv/bin" Environment="FLASK_ENV=production" Environment="PYTHONUNBUFFERED=1" ExecStart=/var/www/soy-nv-ai/venv/bin/python /var/www/soy-nv-ai/run.py Restart=always RestartSec=10 StandardOutput=journal StandardError=journal SyslogIdentifier=soy-nv-ai # 리소스 제한 LimitNOFILE=65535 MemoryLimit=6G CPUQuota=400% # 보안 설정 NoNewPrivileges=true PrivateTmp=true [Install] WantedBy=multi-user.target