# Phenotype container: unprivileged, read-only rootfs, all capabilities dropped.
# Image line is repinned to the exact sha256 digest by the deploy platform.
[Unit]
Description=will service (phenotype)
Before=agent.service

[Container]
Image=ghcr.io/bugabinga/will-service@sha256:REPLACED_BY_DEPLOY
ContainerName=will-service
Pod=will
Volume=%h/containers/will/data:/srv/will-data:Z
ReadOnly=true
NoNewPrivileges=true
DropCapability=all
User=will-service
Notify=healthy

[Service]
Restart=on-failure

[Install]
WantedBy=default.target