[Unit]
Description=Prune unused podman images and volumes
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/bin/podman-prune.sh
# Type=oneshot disables the start timeout by default, so a wedged prune would
# leave the unit "activating" forever and every later trigger would be
# silently skipped -- the same trap the backup units guard against.
TimeoutStartSec={{ podman_prune_timeout | default('1h') }}
# Pruning is I/O-heavy and competes with the 03:00-04:30 backups; keep it off
# the critical path.
Nice=15
IOSchedulingClass=idle