[Unit]
Description=Bound Gitea regenerable download archive cache
After=local-fs.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/gitea-archive-cache-cleaner
User=root
UMask=0077
Nice=10
IOSchedulingClass=idle
TimeoutStartSec=90
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
RuntimeDirectory=gitea-archive-cache-cleaner
RuntimeDirectoryMode=0700
RuntimeDirectoryPreserve=yes
ReadWritePaths=/var/lib/gitea/data/repo-archive /run/gitea-archive-cache-cleaner
PrivateTmp=true