[Unit]
Description=AWS Encryption Provider
After=network.target

[Service]
Type=simple
User={{ ansible_user }}
Environment="HOME=/home/{{ ansible_user }}"
ExecStart=/usr/local/bin/ssh_locker -s /var/run/ssh_locker/provision.sock -t {{ ssh_locker_timeout }}
Restart=on-failure

[Install]
WantedBy=multi-user.target