[Unit] Description=ACME-Tool Updator #OnFailure=status-email-user@%n.service [Service] Type=oneshot User=root PrivateTmp=true NoNewPrivileges=true ExecStart=/etc/acme/acme-tool cron