[Unit]
Description=Encrypted Railiance S1 operating-system backup
Documentation=file:///usr/local/lib/railiance-infra/s1-backup/spec/s1-backup.yaml
After=local-fs.target
ConditionPathIsReadWrite=/opt/backup/railiance/infra

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/railiance-backup-s1
User=root
Group=root
UMask=0077
Nice=10
PrivateTmp=true
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/backup/railiance/infra