[Unit]
Description=Lakehouse-Go queryd — DuckDB-over-S3 SQL surface
Documentation=https://git.agentview.dev/profit/golangLAKEHOUSE
After=network-online.target lakehouse-catalogd.service
Wants=network-online.target
Requires=lakehouse-catalogd.service

[Service]
Type=simple
User=lakehouse
Group=lakehouse
WorkingDirectory=/var/lib/lakehouse
# queryd's DuckDB httpfs path needs S3 credentials; secrets_path
# in lakehouse.toml [queryd] points at /etc/lakehouse/secrets-go.toml
# which storaged also reads.
ExecStart=/usr/local/bin/lakehouse/queryd -config /etc/lakehouse/lakehouse.toml
Restart=on-failure
RestartSec=5

EnvironmentFile=-/etc/lakehouse/auth.env

NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/lakehouse /var/log/lakehouse

StandardOutput=journal
StandardError=journal
SyslogIdentifier=lakehouse-queryd

[Install]
WantedBy=lakehouse-go.target