[Unit]
Description=Sync postgres role from LDAP

[Service]
Type=oneshot
PrivateTmp=yes
User={{ ldap2pg_user }}
Group={{ ldap2pg_user }}
ExecStart=/bin/ldap2pg -c /etc/ldap2pg.yml --{{ ldap2pg_dry_mode | ternary('dry', 'real') }}
TimeoutSec=30m