# infrastructure/host-backup/atlas-k3s-backup.service
[Unit]
Description=Back up the external K3s PostgreSQL datastore
After=postgresql.service

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/atlas-k3s-backup backup
TimeoutStartSec=20min
UMask=0077
Nice=10
IOSchedulingClass=best-effort
IOSchedulingPriority=7
ProtectSystem=full
ProtectHome=true
PrivateTmp=true