[Unit]
Description=CIS490 lab-host auto-update from origin/main
Documentation=https://maxgit.wg/spectral/CIS490
After=network-online.target wg-quick@wg0.service
# We don't Want network-online so that a host that's offline just
# silently skips the update tick instead of pinning a unit failure.

[Service]
Type=oneshot
# Runs as root because install-lab-host.sh writes to /etc/, /opt/, and
# calls systemctl. The script drops to the cis490 user via `sudo -u`
# for the git fetch + pull.
ExecStart=/opt/cis490/scripts/auto-update.sh
StandardOutput=journal
StandardError=journal

[Install]
# The TIMER is what gets enabled, not the service itself. We still set
# WantedBy here so that an operator can `systemctl start
# cis490-autoupdate.service` manually for a one-shot pull.
WantedBy=multi-user.target