[Unit]
Description=LLDAP
Documentation=https://github.com/lldap/lldap

# Only sqlite
After=network.target

[Service]
# The user/group LLDAP is run under. The working directory (see below) should allow write and read access to this user/group.
User={{ lldap_run_user }}
Group={{ lldap_run_group }}
UMask=027

# The location of the compiled binary
ExecStart={{ lldap_install_dir }}/lldap run --config-file {{ lldap_config_dir }}/lldap-config.toml

# Only allow writes to the following directory and set it to the working directory (user and password data are stored here).
WorkingDirectory={{ lldap_install_dir }}
ReadWriteDirectories={{ lldap_install_dir }}

[Install]
WantedBy=multi-user.target