[Unit]
Description=Update CA trust
Before=network-pre.target

[Service]
Type=oneshot
ExecStart=/usr/bin/update-ca-trust

[Install]
WantedBy=multi-user.target