[Unit]
Description=FreshRSS
BindsTo=postgresql.service
After=postgresql.service

[Container]
Image=docker.io/freshrss/freshrss:latest
ContainerName=freshrss
EnvironmentFile=/etc/containers/systemd/freshrss/.env.secrets
Network=freshrss.network
Network=postgresql.network
PublishPort=127.0.0.1:27819:80
Volume=/var/containers/freshrss/data:/var/www/FreshRSS/data:Z
Volume=/var/containers/freshrss/extensions:/var/www/FreshRSS/extensions:Z
# Security
NoNewPrivileges=true
# Resources
Memory=512m
PodmanArgs=--memory-reservation=256m --cpus=0.2 --cpu-shares=128

[Service]
Restart=always
RestartSec=10s

[Install]
WantedBy=default.target