[Unit]
Description=Coherent encrypted email-connect transactional ledger backup
After=network-online.target k3s.service
Wants=network-online.target

[Service]
Type=oneshot
User=root
UMask=0077
StateDirectory=email-connect-backup
StateDirectoryMode=0700
EnvironmentFile=/etc/email-connect-backup/primary.env
ExecStart=/usr/bin/python3 /opt/email-connect-backup/backup-ledger.py backup --execute
TimeoutStartSec=40min
TimeoutStopSec=15min
KillMode=mixed
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ReadWritePaths=/var/lib/email-connect-backup
ProtectHome=true