[Unit]
Description=OpenAI Secure MCP Tunnel for ChatGPT Orchestrator
Wants=network-online.target chatgpt-orchestrator.service
After=network-online.target chatgpt-orchestrator.service

[Service]
Type=simple
WorkingDirectory=%h/Projects/chatgpt-orchestrator
Environment=CHATGPT_ORCHESTRATOR_CONFIG_DIR=%h/.config/chatgpt-orchestrator
Environment=TUNNEL_CLIENT_PROFILE_DIR=%h/.config/tunnel-client
Environment=CHATGPT_ORCHESTRATOR_TUNNEL_PROFILE=chatgpt-orchestrator
Environment=TUNNEL_CLIENT_BIN=%h/.local/bin/tunnel-client
ExecStart=%h/.local/lib/chatgpt-orchestrator/run-tunnel.sh
Restart=always
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=default.target