ee26c3
# /etc/systemd/system/custodia@.service
ee26c3
ee26c3
[Unit]
ee26c3
Description=Custodia Secrets Service for %I
ee26c3
Documentation=https://github.com/latchset/custodia
ee26c3
Requires=custodia@%i.socket
ee26c3
After=network.target
ee26c3
ee26c3
[Service]
ee26c3
Type=notify
ee26c3
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
ee26c3
User=custodia
ee26c3
Group=custodia
ee26c3
ProtectSystem=full
ee26c3
ProtectHome=true
ee26c3
NoNewPrivileges=true
ee26c3
Restart=on-failure
ee26c3
RestartSec=30s
ee26c3
ee26c3
[Install]
ee26c3
WantedBy=multi-user.target