[Unit]
Description=Jianhen VOC comprehensive SP-API refresh
After=network-online.target jianhen-voc.service postgresql.service
Wants=network-online.target
Requires=jianhen-voc.service

[Service]
Type=oneshot
User=voc
Group=voc
WorkingDirectory=/opt/jianhen-voc/deploy
ExecStart=/opt/jianhen-voc/deploy/full-sp-api-refresh.sh
TimeoutStartSec=6h
Nice=10
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/run/lock /opt/jianhen-voc/.cache