[Unit]
Description=Redmine Semantic Index Rolling Refresh
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
WorkingDirectory=/opt/semantic-index
EnvironmentFile=/etc/semantic-index.env
ExecStart=/bin/bash -lc 'exec /opt/semantic-index/semantic_index/refresh.sh --apply'
NoNewPrivileges=true
PrivateTmp=true