[Unit] Description=Ensure setgid bit on all new directories in /mnt/private/workspaces-data/public After=network.target [Service] Type=simple ExecStart=/usr/local/bin/setgid-watcher.sh User=root Restart=on-failure [Install] WantedBy=multi-user.target