[Unit]
Description=HAN Processing VM2 root Compose stack
Requires=docker.service han-secrets-vm2.service
After=docker.service han-secrets-vm2.service network-online.target

[Service]
Type=oneshot
RemainAfterExit=yes
User=root
Group=root
WorkingDirectory=/opt/han-chat/services
ExecStart=/usr/local/sbin/han-vm2-compose up -d --remove-orphans
ExecReload=/usr/local/sbin/han-vm2-compose up -d --remove-orphans
ExecStop=/usr/local/sbin/han-vm2-compose stop
TimeoutStartSec=300
TimeoutStopSec=120
UMask=0077
NoNewPrivileges=yes
PrivateTmp=yes
ProtectHome=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
LockPersonality=yes
LimitCORE=0

[Install]
WantedBy=multi-user.target