[Unit]
Description=Airflow DAG Monitor
Documentation=file:///opt/airflow-monitor/README.md
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=mat
Group=users
WorkingDirectory=/opt/airflow-monitor
ExecStart=/opt/airflow-monitor/venv/bin/python -m airflow_monitor --discover --config /opt/airflow-monitor/config.yaml
Restart=on-failure
RestartSec=30
TimeoutStopSec=15

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=airflow-monitor

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/var/lib/airflow-monitor /var/log/airflow-monitor /var/run
PrivateTmp=true
ProtectHome=read-only

[Install]
WantedBy=multi-user.target