[Unit]
Description=Simple Docker Ops agent
Documentation=https://simpledockerops.com/docs
After=network-online.target docker.service
Wants=network-online.target
Requires=docker.service
StartLimitIntervalSec=0

[Service]
Type=simple
# The agent drives the Docker daemon, which is root-equivalent on the host;
# it runs as root with a minimal environment rather than pretending otherwise.
EnvironmentFile=-/etc/sdko/agent.env
# ProtectHome hides /root, so the docker CLI cannot keep registry credentials in
# $HOME/.docker; `docker login` and `docker compose` use this directory instead.
Environment=DOCKER_CONFIG=/var/lib/sdko/docker
ExecStart=/usr/local/bin/sdko-agent
Restart=always
RestartSec=3
ProtectHome=yes
PrivateTmp=yes
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target