[Unit]
Description=Matter device clock synchronization
Wants=network-online.target
After=network-online.target time-sync.target

[Service]
Type=oneshot
User=mattertimectl
Group=mattertimectl
ExecStart=/opt/mattertimectl/mattertimectl --config /etc/mattertimectl/config.json sync
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/mattertimectl