[Unit]
Description=Traefik Certificate Dumper
ConditionPathExists=/etc/traefik/acme-hook
ConditionPathExists=/var/lib/traefik/acme.json
StartLimitBurst=24
StartLimitIntervalSec=3600
After=network.target network-online.target
Wants=network-online.target

[Service]
Type=simple
Restart=on-failure
ExecStart=/usr/sbin/traefik-certs-dumper file --source '/var/lib/traefik/acme.json' --version 'v3' --crt-name 'root' --dest '/var/lib/traefik/acme-repository' --domain-subdir --key-name 'root' --post-hook '/etc/traefik/acme-hook' --watch
ExecStartPost=/bin/sh -c "umask '022'; pgrep -n 'traefik-certs' > '/run/traefik/traefik-certs-dumper.pid'"
ExecStop=/bin/rm --force '/run/traefik/traefik-certs-dumper.pid'
User=traefik
Group=traefik
PrivateDevices=true
PrivateTmp=true
ProtectSystem=strict
RuntimeDirectory=traefik
RuntimeDirectoryMode=755
RuntimeDirectoryPreserve=yes
ReadOnlyDirectories=/etc/traefik
ReadOnlyDirectories=/var/lib/traefik
ReadWriteDirectories=/var/lib/traefik/acme-repository
WorkingDirectory=/var/lib/traefik

[Install]
WantedBy=multi-user.target