[Unit]
Description=knotless-run Kubernetes workflow runner
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=knotless
Group=knotless
EnvironmentFile=/etc/knotless/env
ExecStart=/usr/local/bin/knotless-run --discover
Restart=always
RestartSec=5
KillSignal=SIGTERM
TimeoutStopSec=900
WorkingDirectory=/var/lib/knotless
StateDirectory=knotless
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/knotless

[Install]
WantedBy=multi-user.target