[Unit]
Description=Borg Backup – PostgreSQL Pull Backup
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=borgbackup
Group=borgbackup
ExecStart=/opt/borg-backup/scripts/backup-postgres.sh

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=borg-backup

# Sicherheit
PrivateTmp=true
NoNewPrivileges=true
ProtectSystem=strict
ReadWritePaths=/backup

# Timeout: max. 4 Stunden
TimeoutStartSec=14400