[Unit]
Description=Reconcile tenant TLS domains
After=network-online.target nginx.service
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/srv/marketplaces/bin/sync-domains.sh
# A failed run must not tear down what is already serving; the next run retries.
SuccessExitStatus=0
StandardOutput=journal
StandardError=journal