[Unit]
Description=Dockhand System Service
After=network-online.target podman.socket
Requires=podman.socket

[Container]
Image=docker.io/fnsys/dockhand:v1.0.22
ContainerName=dockhand
User=0
# Pass the security flag directly to Podman to bypass SELinux socket restrictions
PodmanArgs=--security-opt=label=disable
PublishPort=3000:3000
Volume=/run/podman/podman.sock:/var/run/docker.sock:Z
Volume=/var/podman/dockhand/data:/app/data:Z

[Service]
Restart=always

[Install]
WantedBy=multi-user.target