[Unit]
Description=Smail certificate renewal
After=network-online.target nginx.service
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/local/libexec/smail-acme/renew_certificate.py
EnvironmentFile=-/etc/smail/acme-dns.env
EnvironmentFile=-/etc/smail/acme-renew.env
TimeoutStartSec=720
TimeoutStopSec=15
MemoryHigh=96M
MemoryMax=128M
MemorySwapMax=0
CPUQuota=100%
TasksMax=64
Environment=GOMEMLIMIT=64MiB
UMask=0077
PrivateTmp=true
ProtectHome=true
NoNewPrivileges=true