[Unit]
Description=Collect and invoice previous-month SaaS usage
After=network-online.target postgresql.service
Wants=network-online.target

[Service]
Type=oneshot
User=deploy
Group=deploy
WorkingDirectory=/opt/tiku-saas/repo
EnvironmentFile=/etc/tiku-saas/worker.env
ExecStart=/usr/bin/node /opt/tiku-saas/repo/apps/worker/dist/apps/worker/src/index.js --once --job platform-usage --month previous
ExecStart=/usr/bin/node /opt/tiku-saas/repo/apps/worker/dist/apps/worker/src/index.js --once --job platform-usage-overage --month previous
TimeoutStartSec=3h

NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
ReadWritePaths=/srv/tiku-saas /opt/tiku-saas/repo
CapabilityBoundingSet=
AmbientCapabilities=
LockPersonality=true