{ config, lib, pkgs, ... }: let oofdir = fetchTarball { url = "https://o.euer.krebsco.de/s/AZn9QPLGFZeDfNq/download"; sha256 = "1wa59rkgffql6hbiw9vv0zh35wx9x1cp4bnwicprbd0kdxj75miz"; }; in { systemd.services.kalauerbot = { description = "Kalauerbot"; after = [ "network-online.target" ]; wantedBy = [ "multi-user.target" ]; environment = import <secrets/bureautomation/citadel.nix> // { "KALAUER_OOFDIR" = oofdir; }; serviceConfig = { DynamicUser = true; StateDirectory = "kalauerbot"; WorkingDirectory = "/var/lib/kalauerbot"; ExecStart = "${pkgs.kalauerbot}/bin/kalauerbot"; PrivateTmp = true; Restart = "always"; RuntimeMaxSec = "12h"; }; }; }