[Unit]
Description=CAcert OCSP responder service
After=network.target

[Service]
AmbientCapabilities=CAP_NET_BIND_SERVICE
ExecCondition=/bin/sh -c 'test -f /etc/goocsp/config.yaml'
ExecStart=/usr/bin/cacert-goocsp -serverAddr ":80" -configFile /etc/goocsp/config.yaml
StateDirectory=goocsp
User=cacert-goocsp

[Install]
WantedBy=multi-user.target