[Unit]
Description=Toad deployment API
After=network-online.target podman.socket
Wants=network-online.target podman.socket

[Container]
ContainerName=toad
Image=localhost/bugabinga-toad:latest
UserNS=keep-id
NoNewPrivileges=true
DropCapability=all
ReadOnly=true
SecurityLabelDisable=true
Network=toad.network
Environment=TOAD_DATA_DIR=/data/toad
Environment=TOAD_QUADLET_DIR=/quadlets
Environment=TOAD_ENROLLMENT_FILE=/data/toad/enrollment.json
Environment=TOAD_THEME_CSS=/data/toad/nugu.css
Environment=TOAD_HTTP_ADDR=0.0.0.0:8090
Environment=TOAD_SOCKET=/data/toad/run/toad.sock
Environment=TOAD_PODMAN_SOCKET=/run/podman/podman.sock
Environment=TOAD_SYSTEMD_BUS=unix:path=/run/toad/user-bus
Volume=/data/toad:/data/toad
Volume=/home/toad/.config/containers/systemd:/quadlets
Volume=%t/podman/podman.sock:/run/podman/podman.sock
Volume=%t/bus:/run/toad/user-bus

[Service]
Restart=always
TimeoutStartSec=300

[Install]
WantedBy=default.target