[Unit]
Description=Forgejo Runner
Requires=podman.socket

[Container]
ContainerName=forgejo-runner

User=0
SecurityLabelDisable=true
SeccompProfile=/usr/share/containers/seccomp.json

Image=code.forgejo.org/forgejo/runner:3.3.0
Exec=forgejo-runner --config config.yml daemon

Environment=DOCKER_HOST=unix:///run/user/987/podman/podman.sock

Volume=forgejo-runner_data:/data
Volume=/run/user/987/podman/podman.sock:/run/user/987/podman/podman.sock
Volume=/usr/share/containers/seccomp.json:/usr/share/containers/seccomp.json:ro

Network=pasta

[Service]
Restart=on-failure

[Install]
WantedBy=default.target