[Unit]
Description=Check email-connect ledger archive age and local ciphertext hash
OnFailure=email-connect-ledger-alert@%n.service

[Service]
Type=oneshot
User=root
ExecStart=/usr/bin/python3 /opt/email-connect-backup/backup-ledger.py freshness --mirror-required
ExecStartPost=-/usr/bin/python3 /opt/email-connect-backup/notify-ledger-failure.py
StateDirectory=email-connect-backup
StateDirectoryMode=0700
UMask=0077
ReadWritePaths=/var/lib/email-connect-backup
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true