[Unit]
Description=MikeAI Athena platform operator executor
After=docker.service data.mount network-online.target
Wants=docker.service network-online.target

[Service]
Type=simple
EnvironmentFile=-/etc/mike-ai/athena-operator.env
ExecStart=/usr/local/libexec/mike-ai-athena-operatord
Restart=on-failure
RestartSec=3
UMask=0077
NoNewPrivileges=yes
PrivateTmp=yes
ProtectHome=read-only
ProtectSystem=full
ReadWritePaths=/opt/mike-ai/stack /data/mike-ai-operator /data/models /run/mike-ai-operator /data

[Install]
WantedBy=multi-user.target