[Unit]
Description=Juegoland - PostgreSQL backup
After=postgresql.service

[Service]
Type=oneshot
User=mesa
Group=mesa
EnvironmentFile=/etc/mesa-abierta/backup.env
ExecStart=/bin/sh /opt/mesa-abierta/current/deploy/backup.sh
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/backups/mesa-abierta
UMask=0077