[Unit]
Description=Repair CodexPi access to the Docker socket
Documentation=file:///home/config/CodexPi/docs/installation.md
After=docker.service
ConditionPathIsSocket=/var/run/docker.sock

[Service]
Type=oneshot
User=__CODEXPI_UID__
Group=__CODEXPI_GID__
SupplementaryGroups=__DOCKER_GROUP__
WorkingDirectory=/home/config/CodexPi
ExecStart=/home/config/CodexPi/scripts/ensure-docker-access.sh
NoNewPrivileges=true
PrivateTmp=true
UMask=0077
TimeoutStartSec=180