[Unit]
Description=Ping River Monitor (Rust: collection, forecast, ntfy/Matrix, website/API)
Documentation=https://git.b4l.co.th/B4L/Northern-Thailand-Ping-River-Monitor/src/branch/master/rust
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=water-monitor
Group=water-monitor
WorkingDirectory=/opt/thailand-water-monitor
ExecStart=/opt/thailand-water-monitor/bin/ping-collector run
Restart=always
RestartSec=30
TimeoutStopSec=20

# Every key with its default: .env.example (POSTGRES_*, WEB_LISTEN,
# FORECAST_IN_COLLECTOR, NTFY_*, MATRIX_*, ...). Models are read from models/
# (relative to WorkingDirectory); installed by scripts/install.sh.
EnvironmentFile=/opt/thailand-water-monitor/.env

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/thailand-water-monitor
CapabilityBoundingSet=
# collection + 15 models ~100 MB, response caches up to ~100 MB more
MemoryMax=512M

StandardOutput=journal
StandardError=journal
SyslogIdentifier=ping-collector

[Install]
WantedBy=multi-user.target