[Unit]
Description=Check level-1 CIS Compliance by using CIS Scanner
After=chronyd.service
Requires=chronyd.service

[Service]
Type=oneshot
RemainAfterExit=True
ExecStart=/usr/bin/cis_scanner \
          --config=/usr/share/google/security/cis-compliance/cis_config.textproto \
	  --result=/var/lib/google/cis_scanner_scan_result.textproto \
	  --show-compliant-benchmarks=true \
	  --max-cis-profile-level=1

[Install]
WantedBy=multi-user.target