[Unit]
Description=hc-auditd
After=network.target

[Service]
User=root
Group=root
ExecStartPost=/sbin/auditctl -R /etc/audit/rules.d/audit.rules
ExecStart=/sbin/hc_audit
KillMode=mixed
Restart=always
Type=idle
TimeoutStartSec=1

[Install]
WantedBy=multi-user.target