[Unit]
Description=pvesnap - automatische Proxmox-Snapshots
Documentation=file:/usr/share/doc/pvesnap/README.md
After=network-online.target pve-cluster.service pvedaemon.service
Wants=pve-cluster.service pvedaemon.service

[Service]
Type=simple
ExecStart=/usr/bin/python3 -m pvesnap --config /etc/pvesnap/pvesnap.conf daemon
ExecReload=/bin/kill -HUP $MAINPID
Environment=PYTHONPATH=/usr/lib/pvesnap
Environment=PYTHONUNBUFFERED=1
Restart=on-failure
RestartSec=30
TimeoutStopSec=300

# pvesh benoetigt root-Rechte.
User=root
StateDirectory=pvesnap
RuntimeDirectory=pvesnap

# Moderate Absicherung - der Dienst muss auf pvesh und /etc/pve zugreifen.
NoNewPrivileges=yes
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=full
ProtectKernelTunables=yes
ProtectControlGroups=yes
RestrictRealtime=yes

[Install]
WantedBy=multi-user.target