[Unit]
Description=Refresh UseSend SMTP proxy TLS certificate from NPM's Let's Encrypt store
Documentation=file://%h/Server/UseSend/README.md
After=podman-usesend.service

[Service]
Type=oneshot
ExecStart=%h/Server/UseSend/refresh-smtp-certs
# The script calls `podman restart`, which leaves conmon and the container's
# supervising processes inside THIS unit's cgroup. With the default KillMode,
# systemd waits for that cgroup to empty and the unit times out and reports
# `failed` even though ExecStart returned 0 and the cert was installed correctly.
# KillMode=process makes systemd track only the script itself.
KillMode=process
TimeoutStartSec=300