[Unit]
Description=inbound-library intake, matching and notices
After=network-online.target

[Service]
Type=oneshot
WorkingDirectory=%h/inbound-library
# The IMAP credential is read from OpenBao on every run through the inbound-library
# AppRole (config/library.json "credential"). Nothing is cached on disk. OpenBao is
# reached through the openbao-ui-railiance01 bridge forward on 127.0.0.1:18200.
ExecStart=/usr/bin/python3 -m inbound_library run-due