[Unit]
Description=Refresh fwupd metadata and update motd
Documentation=man:fwupdmgr(1)
Wants=network-online.target
After=network-online.target

[Service]
Type=oneshot
CacheDirectory=fwupdmgr
StandardError=null
ProtectSystem=strict
ProtectHome=read-only
User=fwupd-refresh
RestrictAddressFamilies=AF_NETLINK AF_UNIX AF_INET AF_INET6
SystemCallFilter=~@mount
ProtectKernelModules=yes
ProtectControlGroups=yes
RestrictRealtime=yes
ProtectSystem=full
ProtectHome=true
ProtectHostname=true
ProtectKernelTunables=true
ProtectKernelLogs=true
SuccessExitStatus=2 101
ExecStart=/usr/bin/fwupdmgr refresh