[Unit]
Description=Update CA Certificates
Before=network-pre.target

[Service]
Type=oneshot
ExecStart=/usr/sbin/update-ca-certificates --localcertsdir {{ general.tls_ca_directory }}

[Install]
WantedBy=multi-user.target