[Unit] After=risotto.target [Service] PrivateDevices=false ProtectHome=false ProtectSystem=false LimitNOFILE= LimitNPROC= WorkingDirectory=/srv/vaultwarden ReadWriteDirectories= ReadWriteDirectories=