[Unit]
Description=Renew the %i certificate from Vault
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/sbin/vault-cert-renew /etc/vault-cert/%i.json
PrivateTmp=true
NoNewPrivileges=true
ProtectHome=true