[Unit]
Description=Full system BGS+BGF cook (TX/RX · atoms · grease · all of it)
Documentation=file:///home/default/Desktop/x/Build/cover.sh
After=local-fs.target network-online.target

[Service]
Type=oneshot
User=default
Group=default
WorkingDirectory=/home/default/Desktop/x
Environment=HOME=/home/default
Environment=PATH=/usr/local/bin:/usr/bin:/bin
Environment=SUDO_PASS=mememe
Nice=10
TimeoutStartSec=900
# full = BGS ground · peel · TX/RX · services · atoms · reinstant ALL bearings
ExecStart=/home/default/Desktop/x/Build/cover.sh full
SyslogIdentifier=bgs-bgf-full

NoNewPrivileges=false
PrivateTmp=true
ProtectSystem=full
ProtectHome=false
ReadWritePaths=/home/default/Desktop/x/out /home/default/.local/state
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK

[Install]
WantedBy=multi-user.target