[Unit]
Description=Learnitive narrowly scoped integration secret helper
After=network-online.target
Wants=network-online.target
ConditionPathExists=@@LEARNITIVE_SITE_ROOT@@/public_html/server/youtube-secret-helper.mjs

[Service]
Type=simple
User=root
Group=learnitive-os
WorkingDirectory=@@LEARNITIVE_SITE_ROOT@@/public_html
Environment=NODE_ENV=production
Environment=LEARNITIVE_SECRET_ENV_FILE=/etc/learnitive/learnitive.env
Environment=LEARNITIVE_SECRET_HELPER_SOCKET=/run/learnitive-secret-helper/control.sock
ExecStart=@@LEARNITIVE_SITE_ROOT@@/.learnitive-runtime/bin/node @@LEARNITIVE_SITE_ROOT@@/public_html/server/youtube-secret-helper.mjs
Restart=on-failure
RestartSec=3
RuntimeDirectory=learnitive-secret-helper
RuntimeDirectoryMode=0750
UMask=0007
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/etc/learnitive /run/learnitive-secret-helper
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=true
RestrictSUIDSGID=true

[Install]
WantedBy=multi-user.target