[Unit]
Description=Sync postgres role from LDAP

[Service]
Type=oneshot
PrivateTmp=yes
EnvironmentFile=/etc/sysconfig/ldap2pg
User={{ ldap2pg_user }}
Group={{ ldap2pg_user }}
ExecStart=/usr/local/bin/ldap2pg -c /etc/ldap2pg.yml {{ ldap2pg_dry_mode | ternary('', '--real') }}
TimeoutSec=30m