[Unit]
Description=generate new ca key and certificate

[Service]
Type=oneshot
ExecStart=#BINDIR#/sign-ca