[Unit]
Description=Vaultwarden Server
ConditionFileNotEmpty=/etc/vaultwarden/vaultwarden.conf

# SQLite
After=network.target network-online.target
Requires=network.target

# MariaDB
# After=network.target network-online.target mariadb.service
# Requires=mariadb.service

# PostgreSQL
# After=network.target network-online.target postgresql.service
# Requires=postgresql.service

[Service]
Type=simple
Environment=ROCKET_ADDRESS=::
EnvironmentFile=/etc/vaultwarden/vaultwarden.conf
ExecStartPre=-/usr/lib/vaultwarden/email_header_logo
ExecStart=/usr/sbin/vaultwarden
ExecStartPost=/bin/sh -c "umask '022'; /usr/bin/pgrep --newest 'vaultwarden' > '/run/vaultwarden/vaultwarden.pid'"
ExecStop=/bin/rm --force '/run/vaultwarden/vaultwarden.pid'
User=vaultwarden
Group=vaultwarden
PrivateDevices=true
PrivateTmp=true
ProtectSystem=strict
ReadWriteDirectories=/var/cache/vaultwarden
ReadWriteDirectories=/var/lib/vaultwarden
ReadWriteDirectories=/var/log/vaultwarden
RuntimeDirectory=vaultwarden
RuntimeDirectoryMode=755
WorkingDirectory=/var/lib/vaultwarden

[Install]
WantedBy=multi-user.target