[Unit]
Description=mirror sync
ConditionPathIsReadWrite=/srv/repo/
ConditionPathIsReadWrite=/srv/repo-staging/
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/usr/lib/mirror-sync/mirror-sync.sh
Nice=19
StandardOutput=journal
StandardError=journal
PrivateTmp=yes
PrivateDevices=yes
CapabilityBoundingSet=
NoNewPrivileges=yes