[Unit]
Description=Smartbotic Database Service
After=network.target

[Service]
# v1.7.5: Type=notify so dependents block at startup until the service is
# *actually* ready (recovery complete + migrations applied + gRPC listening),
# not just "process spawned." Pre-1.7.5 this was Type=simple, which made
# `After=smartbotic-database.service` on consumers ineffective: tools,
# gateway, server etc. would launch immediately and silently fall back to
# defaults when their startup DB reads timed out against an in-recovery
# database. The service code already calls `sd_notify(READY=1)` at the
# correct point in `service/src/main.cpp` after `service.start()`; with
# Type=notify systemd actually waits for that signal before considering
# the unit active and unblocking dependents.
Type=notify
NotifyAccess=main
# Recovery on a large dataset (700k+ docs, multi-MB WAL) routinely takes
# 60–90s. Default systemd start timeout (90s) is too tight; bump to 5 min.
# The service emits `EXTEND_TIMEOUT_USEC=` during long recovery anyway, but
# the static cap is the safety net.
TimeoutStartSec=300
User=smartbotic-db
Group=smartbotic-db
ExecStart=/usr/bin/smartbotic-database --config /etc/smartbotic-database/config.json
WorkingDirectory=/var/lib/smartbotic-database
Restart=on-failure
RestartSec=3
TimeoutStopSec=30
LimitNOFILE=65536

[Install]
WantedBy=multi-user.target