[Unit]
Description=KFZ-Prämienrechner
After=network-online.target

[Container]
Image=registry.intern/kfz-rechner:2.5.0
ContainerName=kfz-rechner
PublishPort=127.0.0.1:8081:8080
Environment=UMGEBUNG=produktion
Environment=LOG_LEVEL=INFO
Secret=kfz_db_passwort,type=env,target=DB_PASSWORD
Volume=/srv/kfz/daten:/app/daten:Z
ReadOnly=true
Tmpfs=/tmp:rw,size=32m
NoNewPrivileges=true
DropCapability=ALL
Memory=512m
AutoUpdate=registry

[Service]
Restart=always
TimeoutStartSec=90

[Install]
WantedBy=default.target