# MANAGED BY ANSIBLE - roles/forgejo_runner
[Unit]
Description=Prune unused images and containers inside the Forgejo dind daemon
After={{ forgejo_runner_dind_service }}.service
Requires={{ forgejo_runner_dind_service }}.service

[Service]
Type=oneshot
# Inside the dind container, against dind's own daemon - NOT the host's. The
# host daemon still holds the dind image itself and is not touched here.
#
# Volumes are excluded on purpose; see forgejo_runner_dind_prune_filter in the
# role defaults for why a timer is the wrong place to delete those.
ExecStart=/usr/bin/docker exec {{ forgejo_runner_dind_container }} docker system prune --all --force --filter "{{ forgejo_runner_dind_prune_filter }}"
StandardOutput=journal
StandardError=journal