# eshpfi configs/nemi-vault (infra-ops, 2026-10-14): keeps /srv/nemi/vault, the read-only copy of Prime's notes
# (gitea vh/VuongKB, which he syncs with git), current for Nemi's `vault` source (albok unit 4.4 ruling 6).
# A lkraven USER unit: the clone uses lkraven's gitea SSH key. Fast-forward only: the copy is never written to,
# so a non-ff (a force-push upstream) fails loudly here instead of being papered over.
[Unit]
Description=Pull Prime's notes (vh/VuongKB) into /srv/nemi/vault for Nemi
[Service]
Type=oneshot
ExecStart=/usr/bin/git -C /srv/nemi/vault pull --ff-only --quiet