[Unit]
Description=acme.sh container

[Container]
ContainerName=acme.sh
Exec=daemon
Image=ghcr.io/polarix-containers/acme.sh:latest
EnvironmentFile=/secrets/acme.sh.env
Volume=/srv/acme.sh:/acme.sh:Z
Volume=/srv/certs:/certs:z
PodmanArgs=--runtime runsc --security-opt label:disable
Label=disable
AutoUpdate=registry

[Install]
WantedBy=multi-user.target default.target

[Service]
Restart=always