[Quadlet]
DefaultDependencies=false

[Unit]
Description=CA

After=network-online.target
Wants=network-online.target

[Container]
Image=docker.io/smallstep/step-ca:{{ version['containers']['step'] }}

ContainerName=ca
HostName=ca

PublishPort=9000:9000/tcp

Volume=%h/containers/ca/certs:/home/step/certs:ro
Volume=%h/containers/ca/secrets:/home/step/secrets:ro
Volume=%h/containers/ca/config:/home/step/config:rw
Volume=%h/containers/ca/db:/home/step/db:rw
Volume=%h/containers/ca/templates:/home/step/templates:rw

Environment="TZ=Asia/Seoul"
Environment="PWDPATH=/run/secrets/STEP_CA_PASSWORD"

Secret=STEP_CA_PASSWORD,target=/run/secrets/STEP_CA_PASSWORD

[Service]
Restart=always
RestartSec=10s
TimeoutStopSec=120

[Install]
WantedBy=default.target