[Unit]
Description=Nexus One AI post-activation health window
Requires=ollama.service chromadb.service cezen-api.service nginx.service
After=ollama.service chromadb.service cezen-api.service nginx.service
OnFailure=nexus-one-activation-rollback.service
ConditionPathExists=/var/lib/nexus-one/installer/active-operation.env

[Service]
Type=oneshot
EnvironmentFile=/var/lib/nexus-one/installer/active-operation.env
ExecStart=/usr/bin/python3 /usr/lib/nexus-one/activation-health-window.py --operation-id ${OPERATION_ID} --profile-config ${HEALTH_PROFILE_CONFIG} --samples ${HEALTH_SAMPLES} --interval-seconds ${HEALTH_INTERVAL_SECONDS} --timeout-seconds ${HEALTH_TIMEOUT_SECONDS} --window-timeout-seconds ${HEALTH_WINDOW_TIMEOUT_SECONDS} --evidence ${HEALTH_EVIDENCE_PATH}
TimeoutStartSec=600
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/nexus-one/installer
StandardOutput=journal
StandardError=journal