[Unit]
Description=Apply queued Health Dashboard actions
Documentation=https://github.com/Gamexgit/HealthManager/blob/main/docs/sprint3-dashboard-v4.md

[Service]
Type=oneshot
UMask=0077
Environment=HEALTH_DASHBOARD_FILE=%h/.hermes/assets/Gesundheit/reports/health_dashboard_v4.html
Environment=HEALTH_DASHBOARD_V5_FILE=%h/.hermes/assets/Gesundheit/reports/health_dashboard_v5.html
Environment=HEALTH_DASHBOARD_DB=%h/.hermes/assets/Gesundheit/health_data.db
Environment=HEALTH_DASHBOARD_ACTION_INBOX=%h/.local/state/health-dashboard-actions
ExecStart=%h/.hermes/hermes-agent/venv/bin/python3 %h/.hermes/assets/Gesundheit/scripts/health_dashboard_action_worker.py
Restart=on-failure
RestartSec=2s
TimeoutStartSec=300
NoNewPrivileges=true
PrivateTmp=true
PrivateNetwork=true
ProtectSystem=strict
ProtectHome=read-only
StateDirectory=health-dashboard-actions
StateDirectoryMode=0700
ReadWritePaths=%h/.local/state/health-dashboard-actions %h/.hermes/assets/Gesundheit
RestrictAddressFamilies=AF_UNIX
LockPersonality=true
MemoryDenyWriteExecute=true