[Unit]
Description=ATIME monthly CDR reports (pull + prune + per-region report + email)
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
WorkingDirectory=/opt/ns-scripts/atime-reports
# Secrets live in /opt/ns-scripts/atime-reports/secrets.json (gitignored) OR set them here:
# Environment=ATIME_NS_TOKEN=...
# Environment=ATIME_EMAIL_API_KEY=...
ExecStart=/opt/ns-scripts/atime-reports/venv/bin/python report.py --monthly
# Don't let a bad run wedge the timer; logs go to the journal.
TimeoutStartSec=1800