06c7d6
# /etc/systemd/system/custodia@.service
06c7d6
06c7d6
[Unit]
06c7d6
Description=Custodia Secrets Service for %I
06c7d6
Documentation=https://github.com/latchset/custodia
06c7d6
Requires=custodia@%i.socket
06c7d6
After=network.target
06c7d6
06c7d6
[Service]
06c7d6
Type=notify
06c7d6
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
06c7d6
User=custodia
06c7d6
Group=custodia
06c7d6
ProtectSystem=full
06c7d6
ProtectHome=true
06c7d6
NoNewPrivileges=true
06c7d6
Restart=on-failure
06c7d6
RestartSec=30s
06c7d6
06c7d6
[Install]
06c7d6
WantedBy=multi-user.target