[Unit]
Description=Prometheus — render + upload the static snapshot to bns/prometheus
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=prometheus
WorkingDirectory=/opt/prometheus
Environment=NODE_ENV=production
Environment=AWS_ENDPOINT_URL=https://p2pexchange.silentmode.st:9980
ExecStart=/usr/bin/node /opt/prometheus/scripts/snapshot.mjs --upload --bucket bns/prometheus
Nice=10

# These harden the unit without blocking anything it actually does.
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/opt/prometheus/build /opt/prometheus/db.sqlite