That's why I tend to prefer services that are single go binaries, for example.

For complex stuff like Immich, I'll use podman. But these days with uv, even managing python services with systemd is fine.