[Unit]
Description=Decap CMS OAuth2 Proxy for Devigo
After=network-online.target
Wants=network-online.target

[Container]
Image={{ devigo_oauth_container_image }}
ContainerName={{ devigo_oauth_container_name }}
AutoUpdate=registry

# Environment file with secrets
EnvironmentFile={{ devigo_oauth_home }}/decap-oauth.env

# Network
PublishPort=127.0.0.1:{{ devigo_oauth_container_port }}:12000

# Security
NoNewPrivileges=true

[Service]
Restart=always
TimeoutStartSec=900

[Install]
WantedBy=default.target