[Unit]
Description=radicale.container

[Container]
ContainerName=radicale
RunInit=true
DropCapability=ALL
AddCapability=SETUID SETGID CHOWN KILL
Image=docker.io/tomsquest/docker-radicale:latest
Network=radicale.network
Volume=/srv/radicale/config:/config:Z,ro
Volume=/srv/radicale/data:/data:Z
PodmanArgs=--runtime runsc --security-opt label:disable
Label=disable
AutoUpdate=registry

[Install]
WantedBy=multi-user.target default.target

[Service]
TasksMax=100
MemoryHigh=512M
Restart=always