[Unit]
Description=Run ANSIPA signed policy pull-and-apply periodically

[Timer]
OnBootSec=2min
OnUnitActiveSec=10min
# Avoids a thundering herd of every node hitting the git server on the same tick.
RandomizedDelaySec=90
Persistent=true

[Install]
WantedBy=timers.target