[Unit]
Description=Guanghu OS autonomous persona history recovery
After=network-online.target guanghu-broadcast-tower.service
Wants=network-online.target

[Service]
Type=simple
User=guanghu-history
Group=guanghu-history
ExecStart=/opt/guanghu/persona-history/current/guanghu_history_runtime.py run --config /etc/guanghu/persona-history.json
Restart=always
RestartSec=5
Nice=10
IOSchedulingClass=best-effort
IOSchedulingPriority=6
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=strict
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
RestrictSUIDSGID=true
LockPersonality=true
MemoryMax=768M
CPUQuota=60%
ReadOnlyPaths=/guanghu/gestation/private/history-sources
ReadWritePaths=/var/lib/guanghu/persona-history

[Install]
WantedBy=multi-user.target