[Unit]
Description=MABEA Eskalations-Pruefung (Karte 12, oneshot)
After=network.target postgresql.service
Requires=postgresql.service

[Service]
Type=oneshot
User=mabea
WorkingDirectory=/opt/mabea/backend
EnvironmentFile=/opt/mabea/backend/.env
ExecStart=/opt/mabea/backend/.venv/bin/python -m scripts.eskalation_pruefen

NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/opt/mabea/backend