3e36f3
# /etc/systemd/system/custodia@.service
3e36f3
3e36f3
[Unit]
3e36f3
Description=Custodia Secrets Service for %I
3e36f3
Documentation=https://github.com/latchset/custodia
3e36f3
Requires=custodia@%i.socket
3e36f3
After=network.target
3e36f3
3e36f3
[Service]
3e36f3
Type=notify
3e36f3
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
3e36f3
User=custodia
3e36f3
Group=custodia
3e36f3
ProtectSystem=full
3e36f3
ProtectHome=true
3e36f3
NoNewPrivileges=true
3e36f3
Restart=on-failure
3e36f3
RestartSec=30s
3e36f3
3e36f3
[Install]
3e36f3
WantedBy=multi-user.target