[Unit]
Description=Todo web application
After=network-online.target
Wants=network-online.target

[Container]
Image={{ app_image }}
ContainerName=app-todo
EnvironmentFile=/home/{{ app_user }}/.config/todo.env
Network=host
Pull=never
NoNewPrivileges=true
ReadOnly=true
DropCapability=all

[Service]
Restart=always
RestartSec=5
TimeoutStopSec=15

[Install]
WantedBy=default.target