[Unit]
Description=Cloudflare Tunnel - Sistema de ADAN
Documentation=https://developers.cloudflare.com/cloudflare-one/connections/connect-apps
After=network-online.target
Wants=network-online.target

[Service]
Type=exec
User=root
Group=root

# Directorio de configuracion
WorkingDirectory=/etc/cloudflared

# Comando de inicio
# Opcion 1: Usando token (recomendado)
ExecStart=/usr/local/bin/cloudflared tunnel --no-autoupdate run --token ${CLOUDFLARE_TUNNEL_TOKEN}

# Opcion 2: Usando archivo de configuracion
# ExecStart=/usr/local/bin/cloudflared tunnel --config /etc/cloudflared/config.yml run

# Cargar variables de entorno
EnvironmentFile=/opt/adan/.env

# Reinicio automatico
Restart=always
RestartSec=5

# Timeouts
TimeoutStartSec=60
TimeoutStopSec=30

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=cloudflared

# Seguridad
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target