[Unit]
Description=Monthly offsite restore test with automatic scratch cleanup
Wants=network-online.target docker.service
After=network-online.target docker.service
OnFailure=app-restore-test-cleanup.service

[Service]
Type=oneshot
ExecStart=/bin/bash /usr/local/sbin/app-restore-test.sh
ExecStopPost=/bin/bash /usr/local/sbin/app-restore-test.sh --cleanup
SELinuxContext=system_u:system_r:unconfined_service_t:s0
TimeoutStartSec=12h
TimeoutStopSec=5min
KillMode=control-group
# A busy shared lock is retried later; a failed restore remains a visible failure.
Restart=no
RestartForceExitStatus=75
RestartSec=1h
UMask=0077
Nice=15
IOSchedulingClass=best-effort
IOSchedulingPriority=7
Environment=LANG=C
Environment=LC_ALL=C
StandardOutput=journal
StandardError=journal