[Unit]
Description=Route Mike AI Docker egress through the WireGuard gateway container
After=docker.service
Requires=docker.service

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/mike-ai-container-vpn-guard
RemainAfterExit=yes
Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target