[Unit]
Description=tiku-supabase worker
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=deploy
Group=deploy
WorkingDirectory=/opt/tiku-saas/repo
EnvironmentFile=/etc/tiku-saas/worker.env
ExecStart=/usr/bin/node /opt/tiku-saas/repo/apps/worker/dist/apps/worker/src/index.js --loop
Restart=always
RestartSec=5
KillSignal=SIGTERM
TimeoutStopSec=60

NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ProtectHome=true
ReadWritePaths=/srv/tiku-saas /opt/tiku-saas/repo
CapabilityBoundingSet=
AmbientCapabilities=
LockPersonality=true

[Install]
WantedBy=multi-user.target