[Unit]
Description=CertMan Certificate Manager Daemon
After=network-online.target
Wants=network-online.target

[Service]
Type=simple

User=certman
Group=certman

WorkingDirectory=/var/local/certman

ExecStart=/usr/local/bin/certman daemon start
ExecReload=/usr/local/bin/certman daemon reload
ExecStop=/usr/local/bin/certman daemon stop

Restart=on-failure
RestartSec=2s

NoNewPrivileges=true
PrivateTmp=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true

StandardOutput=journal
StandardError=journal

TimeoutStartSec=30
TimeoutStopSec=30

[Install]
WantedBy=multi-user.target