[Unit]
Description=Gitea Actions Runner (webgpu-portfolio)
After=network.target docker.service
Requires=docker.service

[Service]
Type=simple
User=djoser
ExecStart=/usr/local/bin/act_runner daemon --config /home/djoser/.gitea-act-runner/config.yaml
WorkingDirectory=/home/djoser/.gitea-act-runner
Restart=always
RestartSec=5

# Security
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/home/djoser/.gitea-act-runner /home/djoser/.cache/actcache /var/run/docker.sock

[Install]
WantedBy=multi-user.target