File service-file.patch of Package step-ca

Index: certificates-0.18.0/systemd/step-ca.service
===================================================================
--- certificates-0.18.0.orig/systemd/step-ca.service
+++ certificates-0.18.0/systemd/step-ca.service
@@ -6,16 +6,16 @@ After=network-online.target
 Wants=network-online.target
 StartLimitIntervalSec=30
 StartLimitBurst=3
-ConditionFileNotEmpty=/etc/step-ca/config/ca.json
+ConditionFileNotEmpty=/var/lib/step-ca/.step/config/ca.json
 ConditionFileNotEmpty=/etc/step-ca/password.txt
 
 [Service]
 Type=simple
-User=step
-Group=step
-Environment=STEPPATH=/etc/step-ca
-WorkingDirectory=/etc/step-ca
-ExecStart=/usr/bin/step-ca config/ca.json --password-file password.txt
+User=_step-ca
+Group=_step-ca
+Environment=STEPPATH=/var/lib/step-ca/.step/
+WorkingDirectory=/var/lib/step-ca/
+ExecStart=/usr/sbin/step-ca .step/config/ca.json --password-file /etc/step-ca/password.txt
 ExecReload=/bin/kill --signal HUP $MAINPID
 Restart=on-failure
 RestartSec=5
@@ -52,7 +52,7 @@ PrivateDevices=true
 SystemCallFilter=@system-service
 SystemCallArchitectures=native
 MemoryDenyWriteExecute=true
-ReadWriteDirectories=/etc/step-ca/db
+ReadWriteDirectories=/var/lib/step-ca/
 
 [Install]
 WantedBy=multi-user.target