[Unit]
Description=Modio localapi service
Requires=modio-logger.service modio-localapi.socket
ConditionFileNotEmpty=/modio/mytemp.crt
ConditionFileNotEmpty=/modio/mytemp.key
ConditionFileNotEmpty=/modio/ca.localapi.crt

[Service]
Type=simple
Restart=always
RestartSec=43

ExecStart=/opt/bin/modio-localapi -v --server-cert /var/lib/modio-localapi/server.crt --server-key /var/lib/modio-localapi/server.key --ca-cert /var/lib/modio-localapi/ca.localapi.crt

ProtectSystem=true
PrivateTmp=true
DynamicUser=true
User=modio-localapi
Group=modio-localapi
StateDirectory=modio-localapi

BindReadOnlyPaths=/modio/mytemp.crt:%S/modio-localapi/server.crt
BindReadOnlyPaths=/modio/mytemp.key:%S/modio-localapi/server.key
BindReadOnlyPaths=/modio/ca.localapi.crt:%S/modio-localapi/ca.localapi.crt