[Unit]
Description=Foxhunt Trading Layer Interface
After=foxhunt-core.service
Requires=foxhunt-core.service
Documentation=https://github.com/foxhunt/docs

[Service]
Type=exec
User=foxhunt
Group=foxhunt
WorkingDirectory=/opt/foxhunt
ExecStart=/opt/foxhunt/bin/foxhunt-tli
ExecReload=/bin/kill -HUP $MAINPID
ExecStop=/bin/kill -TERM $MAINPID
TimeoutStopSec=30
Restart=always
RestartSec=5

# Critical path isolation - highest priority CPU cores
CPUAffinity=0-1
SchedulingPolicy=fifo
SchedulingPriority=95

# Memory optimization
MemoryAccounting=yes
MemoryMax=2G
LimitNOFILE=65536
LimitMEMLOCK=2147483648

# Security
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
ReadWritePaths=/opt/foxhunt/data /var/log/foxhunt /tmp

# Environment
Environment=RUST_LOG=info
Environment=FOXHUNT_CONFIG=/opt/foxhunt/config/production.toml
Environment=FOXHUNT_CORE_ENDPOINT=http://localhost:8080
Environment=FOXHUNT_ENV=production

[Install]
WantedBy=multi-user.target