[Unit]
Description=Tell Ansible on NAS to reconfigure Unbound for us
After=openvpn-client@proton.service
BindsTo=openvpn-client@proton.service

[Service]
Type=oneshot
ExecStart=/bin/sh -c "ssh root@nas bash -c 'cd /root/git/ansible && ansible-playbook --vault-password-file /root/.vaultpass -i /root/git/ansible/inventory /root/git/ansible/oneoffs/restart-vpn.yml'"
RemainAfterExit=true
StandardOutput=journal

[Install]
WantedBy=multi-user.target