[Unit]
Description=shipdeck-bridge — token-gated HTTP wrapper for the shipdeck CLI (DashCaddy deploys panel)
After=network.target

[Service]
Type=simple
ExecStart=/usr/bin/python3 /opt/shipdeck-bridge/bridge.py
Environment=SHIPDECK_BIN=/usr/local/bin/shipdeck
Environment=SHIPDECK_BRIDGE_TOKEN_FILE=/etc/shipdeck/bridge-token
Environment=SHIPDECK_REPOS_ROOT=/root
Environment=SHIPDECK_BRIDGE_PORT=8977
Restart=on-failure
RestartSec=3
# root: needs the ssh keys + fleet-dns that shipdeck orchestrates
User=root

[Install]
WantedBy=multi-user.target