# Managed by Ansible — do not edit manually.
#
# Runs as root: it needs read access to Caddy's 0700 cert storage AND the
# ability to run `docker compose kill -s HUP` regardless of docker group
# membership. Triggered by mqtt-cert-sync.path, not run standalone.
[Unit]
Description=Sync Caddy-issued MQTT TLS cert to mosquitto and reload

[Service]
Type=oneshot
ExecStart=/opt/drb/sync-mqtt-cert.sh