[Exec]
Boot=yes
Hostname={{ item.key }}.{{ vault_public_domain }}

[Files]
BindReadOnly=/etc/letsencrypt/live/{{ vault_public_domain }}:/etc/letsencrypt/live/{{ vault_public_domain }}
BindReadOnly=/etc/letsencrypt/archive/{{ vault_public_domain }}:/etc/letsencrypt/archive/{{ vault_public_domain }}

[Network]
Bridge=nspawn-br0