[Unit] Description=radicale.container [Container] ContainerName=radicale RunInit=true DropCapability=ALL AddCapability=SETUID SETGID CHOWN KILL Image=docker.io/tomsquest/docker-radicale Network=frontend.network Volume=/srv/radicale/config:/config:Z,ro Volume=/srv/radicale/data:/data:Z #PodmanArgs=--runtime runsc --security-opt label:disable #Label=disable AutoUpdate=registry [Install] WantedBy=multi-user.target default.target [Service] TasksMax=50 MemoryHigh=256M Restart=always