[Unit]
Description=WG Paid activity sampler one-shot
Documentation=file:/opt/router-ops/bin/wgpaid-activity-sampler-once
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
User=ops
Group=ops
WorkingDirectory=/opt/router-ops
ExecStart=/bin/sh -lc 'mkdir -p "/opt/router-ops/runtime/wgpaid-activity-sampler" "/opt/router-ops/state"; "/opt/router-ops/bin/wgpaid-activity-sampler-once" --apply --json-out "/opt/router-ops/runtime/wgpaid-activity-sampler/last-run.json"; cp "/opt/router-ops/runtime/wgpaid-activity-sampler/last-run.json" "/opt/router-ops/state/current-wgpaid-activity-sampler-last-run.json"'
Nice=5
IOSchedulingClass=best-effort
IOSchedulingPriority=7
TimeoutStartSec=180
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=false
ProtectSystem=full
ReadWritePaths=/opt/router-ops