[Unit]
Description=Step-CA PKI
After=network.target
ConditionPathExists=/root/.step/config/ca.json

[Service]
ExecStart=/usr/bin/step-ca /root/.step/config/ca.json --password-file=/root/step_password
Restart=on-failure