[Unit]
Description = Mountpoint for persistent secrets

[Mount]
What=LABEL=${secrets_part_name}
Where=/var/opt/secrets
Type=ext4
Options=nosuid,nodev

[Install]
WantedBy=local-fs.target