[Unit]
Description=Orama Namespace Olric Cache (%i)
Documentation=https://github.com/DeBrosOfficial/network
After=network.target orama-namespace-rqlite@%i.service
Requires=orama-namespace-rqlite@%i.service
PartOf=orama-node.service

[Service]
Type=simple
User=orama
Group=orama
WorkingDirectory=/home/orama

# Olric reads config from environment variable (set in env file)
EnvironmentFile=/home/orama/.orama/data/namespaces/%i/olric.env

ExecStart=/home/orama/bin/olric-server

TimeoutStopSec=30s
KillMode=mixed
KillSignal=SIGTERM

Restart=on-failure
RestartSec=5s

StandardOutput=journal
StandardError=journal
SyslogIdentifier=orama-olric-%i

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
ProtectKernelTunables=yes
ProtectKernelModules=yes
ReadWritePaths=/home/orama/.orama/data/namespaces

LimitNOFILE=65536
MemoryMax=2G

[Install]
WantedBy=multi-user.target