[Unit]
Description=Apply queued Health Dashboard actions
Documentation=https://github.com/Gamexgit/HealthManager/blob/main/docs/sprint3-dashboard-v4.md

[Service]
Type=oneshot
UMask=0077
Environment=HEALTH_DASHBOARD_FILE=%h/.hermes/assets/Gesundheit/reports/health_dashboard_v4.html
Environment=HEALTH_DASHBOARD_V5_FILE=%h/.hermes/assets/Gesundheit/reports/health_dashboard_v5.html
Environment=HEALTH_DASHBOARD_DB=%h/.hermes/assets/Gesundheit/health_data.db
Environment=HEALTH_DASHBOARD_V5_PROFILE=health-record-6e
Environment=HEALTH_DASHBOARD_ACTION_INBOX=%h/.local/state/health-dashboard-actions
Environment=HEALTH_DASHBOARD_CAPTURE_QUARANTINE=%h/.local/state/health-dashboard-actions/quarantine
Environment=HEALTH_DASHBOARD_CAPTURE_MEDIA=%h/.hermes/assets/Gesundheit/private-media/capture
Environment=HEALTH_DASHBOARD_DOCUMENT_QUARANTINE=%h/.local/state/health-dashboard-actions/document-quarantine
Environment=HEALTH_DASHBOARD_DOCUMENT_STORAGE=%h/.hermes/assets/Gesundheit/private-media/documents
ExecStart=%h/.hermes/hermes-agent/venv/bin/python3 %h/.hermes/assets/Gesundheit/scripts/health_dashboard_action_worker.py
Restart=on-failure
RestartSec=2s
TimeoutStartSec=900
MemoryMax=1G
TasksMax=64
LimitFSIZE=256M
NoNewPrivileges=true
PrivateTmp=true
PrivateNetwork=true
ProtectSystem=strict
ProtectHome=read-only
StateDirectory=health-dashboard-actions
StateDirectoryMode=0700
ReadWritePaths=%h/.local/state/health-dashboard-actions %h/.hermes/assets/Gesundheit
RestrictAddressFamilies=AF_UNIX
LockPersonality=true
MemoryDenyWriteExecute=true