From a9c771e3f5945998f12d322710fcdce3bb6cda17 Mon Sep 17 00:00:00 2001
From: admin <root@lelekaos.com>
Date: Mon, 18 May 2026 15:25:29 +0000
Subject: [PATCH] feat: add systemd service unit

---
 deploy/ns8-backup-monitor.service | 33 +++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 deploy/ns8-backup-monitor.service

diff --git a/deploy/ns8-backup-monitor.service b/deploy/ns8-backup-monitor.service
new file mode 100644
index 0000000..61a0da4
--- /dev/null
+++ b/deploy/ns8-backup-monitor.service
@@ -0,0 +1,33 @@
+[Unit]
+Description=NS8 Backup Monitor - Alertmanager webhook receiver
+After=network.target
+Documentation=https://repo.lelekaos.com/admin/ns8-backup-monitor
+
+[Service]
+Type=simple
+User=root
+Group=root
+WorkingDirectory=/opt/ns8-backup-monitor
+
+# Configuration
+Environment=PYTHONUNBUFFERED=1
+ExecStart=/usr/bin/python3 -m ns8_backup_monitor --config /etc/ns8-backup-monitor/config.yml
+
+# Restart policy: restart on failure, wait 10s between attempts
+Restart=on-failure
+RestartSec=10s
+StartLimitIntervalSec=120
+StartLimitBurst=5
+
+# Security hardening
+PrivateTmp=true
+ProtectSystem=full
+ReadWritePaths=/var/log
+
+# stdout/stderr go to journald
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=ns8-backup-monitor
+
+[Install]
+WantedBy=multi-user.target