[Unit]
Description=Renewal ssh user certificate %i

[Service]
EnvironmentFile=/etc/default/ssh-cert-renew
EnvironmentFile=-%h/.config/ssh/cert-renew
Type=oneshot
ExecStart=+mkdir -p %h/.config/ssh
ExecStart=/usr/local/bin/timer-mail -t ${ssh_cert_mail_to} -f ${ssh_cert_mail_from} -s "ssh certificate renewal %i" -ve \
					/etc/systemd/ssh-cert-renew ${ssh_cert_sign_host} %h/.ssh/%i