# One-shot: report when the live Sando topology is not what main says.
#
# Place at /etc/systemd/system/sando-config-drift.service on the Sando host.
#
# Reads only — it never installs a topology. A non-zero exit leaves this unit in
# `failed`, which is the point: that is the loud, standing signal PoM's systemd
# checks already look at, and it costs nothing to keep armed.

[Unit]
Description=Sando: report topology drift between the repo and the live config
After=sandod.service
# Deliberately not Requires=: a stopped sandod does not make the live file any
# less drifted, and this check reads files rather than talking to the daemon.

[Service]
Type=oneshot
ExecStart=/usr/local/lib/sando/check-topology-drift.sh
# The bare repo is sando-owned and the live topology is world-readable, so this
# needs no privilege at all.
User=sando
Group=sando