[Unit]
Description=Unbound Control Key And Certificate Generator
After=syslog.target 
Before=unbound.service
ConditionPathExists=!/etc/unbound/unbound_control.pem
ConditionPathExists=!/etc/unbound/unbound_control.key
ConditionPathExists=!/etc/unbound/unbound_server.pem
ConditionPathExists=!/etc/unbound/unbound_server.key
PartOf=unbound.service

[Service]
Type=oneshot
Group=unbound
ExecStart=/usr/sbin/unbound-control-setup -d /etc/unbound/
ExecStart=/sbin/restorecon /etc/unbound/*
RemainAfterExit=yes

[Install]
WantedBy=multi-user.target