[Unit]
Description=Private Maestro GPUQ gateway
After=network.target maestro.service gpuq-api.service
Wants=maestro.service gpuq-api.service

[Service]
Type=simple
User=maestro
Group=maestro
WorkingDirectory=/home/kiwerkzeuge.de/private/maestro-overlay
Environment=PYTHONUNBUFFERED=1
Environment=PYTHONUTF8=1
Environment=MAESTRO_GATEWAY_HOST=127.0.0.1
Environment=MAESTRO_GATEWAY_PORT=17861
Environment=MAESTRO_PUBLIC_PREFIX=/video-studio
Environment=MAESTRO_UPSTREAM=http://127.0.0.1:17860
Environment=MAESTRO_GPUQ=http://127.0.0.1:8020
Environment=MAESTRO_GPUQ_SECRET_FILE=/home/kiwerkzeuge.de/private/maestro-runtime/secrets/gpuq-bridge.secret
Environment=MAESTRO_GPUQ_JOB_DIR=/home/kiwerkzeuge.de/private/maestro-runtime/gpuq-jobs
Environment=MAESTRO_MIN_FREE_MIB=8192
Environment=MAESTRO_MAX_GPU_UTIL=85
ExecStart=/usr/bin/python3 /home/kiwerkzeuge.de/private/maestro-overlay/bin/maestro_gpuq_gateway.py
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=full
ReadWritePaths=/home/kiwerkzeuge.de/private/maestro-runtime

[Install]
WantedBy=multi-user.target