[Unit]
Description=RK1 media appliance identity and SSH hardening
DefaultDependencies=no
After=local-fs.target systemd-remount-fs.service
Before=ssh.service sshd.service getty.target serial-getty.target multi-user.target
ConditionPathExists=!/var/lib/rk1-media/identity-ready

[Service]
Type=oneshot
RuntimeDirectory=sshd
RuntimeDirectoryMode=0755
ExecStart=/usr/local/sbin/rk1-media-identity

[Install]
WantedBy=sysinit.target