# Install (Linux): copy to /etc/systemd/system/worker-security.service, then:
#   sudo systemctl daemon-reload
#   sudo systemctl enable --now worker-security
#
# Set User= and paths to match your deploy. WorkingDirectory MUST be the bundle
# folder containing worker_security.py and Reports/ (ZAP bind mount uses this path).

[Unit]
Description=Scan Shield security queue worker (Supabase + Docker scans + email)
After=network-online.target docker.service
Wants=network-online.target

[Service]
Type=simple
User=deploy
WorkingDirectory=/opt/worker_security
Environment=PYTHONUNBUFFERED=1
# Load SMTP / Supabase from bundle .env (recommended on Linux):
# EnvironmentFile=/opt/worker_security/.env
ExecStart=/opt/worker_security/.venv/bin/python /opt/worker_security/worker_security.py
Restart=always
RestartSec=10

[Install]
WantedBy=multi-user.target