[Unit]
Description=Email alert for failed OpenBAO maintenance unit %i
# Deliberately no OnFailure= here: if the alerter itself fails it must not
# recurse. It exits 0 on send failure and logs to /var/log/openbao-alerts.log.
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
# %i (escaped instance), NOT %I: unit names contain '-', which systemd's
# unescaping would turn into '/' (openbao-backup.service -> openbao/backup).
ExecStart=/home/lutz/Projects/OpenBAO/scripts/send-failure-alert.sh %i
# Runs as root: reads /etc/openbao-alert-smtp.token and journalctl -u.