[Unit]
Description=Create local consistent Matrix backup
Wants=network-online.target
After=network-online.target k3s.service

[Service]
Type=oneshot
User=root
Group=root
UMask=0077
ExecStart={{ matrix_backup_script_path }}
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=full
ReadWritePaths={{ matrix_backup_path }} /etc/matrix-bootstrap