[Unit]
Description=Rebuild and publish the Hound definition feed
Documentation=https://houndav.com
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=anon
# Runs as the publisher, not as root: it needs the signing key and write
# access to the published directory, and nothing else. A build pipeline that
# runs as root to write a web directory is a larger target than the thing it
# protects.
WorkingDirectory=/home/anon/agents/hound/antivirus
ExecStart=/home/anon/agents/hound/antivirus/tools/refresh-definitions.sh
# The OSV exports total a few hundred MB and npm alone is a quarter of a
# million records; a slow morning should not look like a hang.
TimeoutStartSec=45min
Nice=10
IOSchedulingClass=idle

[Install]
WantedBy=multi-user.target