[Unit]
Description=Kraken Crypto Trader Bot
# Wait for network before running
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot

# ── Change this path to wherever you cloned the repo ──────────────────────
WorkingDirectory=/opt/crypto-trader
ExecStart=/opt/crypto-trader/venv/bin/python bot.py
# ──────────────────────────────────────────────────────────────────────────

# Run as a dedicated low-privilege user (created by install.sh)
User=crypto-trader
Group=crypto-trader

# Harden the service: read-only filesystem except the working directory
ProtectSystem=full
ReadWritePaths=/opt/crypto-trader
NoNewPrivileges=true
PrivateTmp=true

# Logs go to journald; view with: journalctl -u crypto-trader.service
StandardOutput=journal
StandardError=journal

[Install]
WantedBy=multi-user.target