d3ade9
# /etc/systemd/system/custodia@.service
d3ade9
d3ade9
[Unit]
d3ade9
Description=Custodia Secrets Service for %I
d3ade9
Documentation=https://github.com/latchset/custodia
d3ade9
Requires=custodia@%i.socket
d3ade9
After=network.target
d3ade9
d3ade9
[Service]
d3ade9
Type=notify
d3ade9
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
d3ade9
User=custodia
d3ade9
Group=custodia
d3ade9
ProtectSystem=full
d3ade9
ProtectHome=true
d3ade9
NoNewPrivileges=true
d3ade9
Restart=on-failure
d3ade9
RestartSec=30s
d3ade9
d3ade9
[Install]
d3ade9
WantedBy=multi-user.target