[Unit] Description = Generate Secrets [Service] Type=oneshot RemainAfterExit=true ExecStart=/usr/bin/bash -c "podman secret exists ${postgres_password_secret_name} || head -c 16 /dev/urandom | base64 | podman secret create ${postgres_password_secret_name} -" [Install] WantedBy=multi-user.target