60ad85
# /etc/systemd/system/custodia@.service
60ad85
60ad85
[Unit]
60ad85
Description=Custodia Secrets Service for %I
60ad85
Documentation=https://github.com/latchset/custodia
60ad85
Requires=custodia@%i.socket
60ad85
After=network.target
60ad85
60ad85
[Service]
60ad85
Type=notify
60ad85
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
60ad85
User=custodia
60ad85
Group=custodia
60ad85
ProtectSystem=full
60ad85
ProtectHome=true
60ad85
NoNewPrivileges=true
60ad85
Restart=on-failure
60ad85
RestartSec=30s
60ad85
60ad85
[Install]
60ad85
WantedBy=multi-user.target