[Unit]
Description=刻舟 ICE-GL-KZ-001 每日任务
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=kezhou
Group=kezhou
WorkingDirectory=/opt/guanghu/personas/kezhou
EnvironmentFile=-/etc/guanghu/persona-keys/kezhou.env
ExecStart=/opt/guanghu/personas/kezhou/kezhou-daily.sh
StandardOutput=journal
StandardError=journal
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/guanghu/personas/kezhou /var/lib/guanghu/kezhou
ReadOnlyPaths=/etc/guanghu/persona-keys

[Install]
WantedBy=multi-user.target