[Unit]
Description=Paperless-ngx Postgres

[Container]
ContainerName=paperless-ngx-postgres
Image=docker.io/library/postgres:{{ paperless_ngx_postgres_version }}

Environment=TZ=Europe/Berlin
Environment=POSTGRES_USER=paperless
Environment=POSTGRES_PASSWORD=paperless
Environment=POSTGRES_DB=paperless

Network=paperless.network

Volume=/var/paperless-ngx/postgres:/var/lib/postgresql/data:rw

NoNewPrivileges=true
DropCapability=All
AddCapability=net_bind_service

#UserNS=keep-id
# Required to access the Podman Socket
#SecurityLabelDisable=true
PodmanArgs=--userns=keep-id --security-opt label=disable

[Service]
Restart=on-failure
# Restart Delay
RestartSec=30
# Allowed time for the service to start.
TimeoutStartSec=90
# Allowed time for the service to stop.
TimeoutStopSec=90

[Install]
WantedBy=default.target