[Unit]
Description=HVAC Know It All Content Scraper
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=ben
Group=ben
WorkingDirectory=/opt/hvac-kia-content
Environment=DISPLAY=:0
Environment=HOME=/home/ben
EnvironmentFile=/opt/hvac-kia-content/.env
ExecStart=/opt/hvac-kia-content/.venv/bin/python -m src.orchestrator --sync-nas
StandardOutput=journal
StandardError=journal
SyslogIdentifier=hvac-scraper

# Security settings
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/hvac-kia-content /mnt/nas/hvacknowitall /tmp
PrivateDevices=false  # Allow access to display devices

[Install]
WantedBy=multi-user.target