70e700f
# /etc/systemd/system/custodia@.service
70e700f
70e700f
[Unit]
70e700f
Description=Custodia Secrets Service for %I
70e700f
Documentation=https://github.com/latchset/custodia
70e700f
Requires=custodia@%i.socket
70e700f
After=network.target
70e700f
70e700f
[Service]
70e700f
Type=notify
70e700f
ExecStart=/usr/sbin/custodia --instance=%i /etc/custodia/%i.conf
70e700f
User=custodia
70e700f
Group=custodia
70e700f
ProtectSystem=full
70e700f
ProtectHome=true
70e700f
NoNewPrivileges=true
70e700f
Restart=on-failure
70e700f
RestartSec=30s
70e700f
70e700f
[Install]
70e700f
WantedBy=multi-user.target