[Unit]
Description=Bounded PeerTube worker throughput probe (Tailscale only)
After=tailscaled.service network-online.target
Wants=tailscaled.service network-online.target
StartLimitIntervalSec=300
StartLimitBurst=10

[Service]
Type=notify
NotifyAccess=main
TimeoutStartSec=45
User=pt-netprobe
Group=pt-netprobe
ExecStart=/usr/bin/python3 /opt/pt-worker-netprobe/bandwidth-probe.py --bind 100.92.231.98 --port 9044
Restart=always
RestartSec=30
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true
CapabilityBoundingSet=
RestrictAddressFamilies=AF_INET AF_UNIX
MemoryMax=96M
TasksMax=16
CPUQuota=20%

[Install]
WantedBy=multi-user.target