# Senses-and-muscles container: user will, unrestricted passwordless sudo inside.
# Image line is repinned to the exact sha256 digest by the deploy platform.
[Unit]
Description=will agent (senses and muscles)
After=service.service
Wants=service.service

[Container]
Image=ghcr.io/bugabinga/will-agent@sha256:REPLACED_BY_DEPLOY
ContainerName=will-agent
Pod=will
Volume=%h/containers/will/agent:/srv/will-agent:Z
Secret=zai-api-key,type=env,target=ZAI_API_KEY
Secret=telegram-bot-token,type=env,target=TELEGRAM_BOT_TOKEN
Secret=vcs-deploy-key,type=mount,target=/run/secrets/vcs_deploy_key
Secret=deploy-rollback-token,type=env,target=WILL_DEPLOY_ROLLBACK_TOKEN
Environment=WILL_TELEGRAM_CHAT_ID=-100
Environment=WILL_TELEGRAM_OLIVER_ID=SET_ME
Environment=WILL_DEPLOY_API_URL=https://deploy.bugabinga.net
Environment=WILL_REVISION=SET_BY_DEPLOY
# No host podman socket, no systemd bus, no quadlet paths, ever.

[Service]
Restart=on-failure

[Install]
WantedBy=default.target