[Unit]
Description=Unseal Vault Service
After=vault.service network.target
Requires=vault.service
PartOf=vault.service

[Service]
Type=oneshot
ExecStart=/usr/local/bin/vault-unseal.sh
RemainAfterExit=yes
User=root

[Install]
WantedBy=multi-user.target