[Unit]
Before=nginx-chroot.service
PartOf=chr-proxyd.target

[Mount]
What=/etc/ssl/sys
Where=/chroot/proxyd/etc/ssl/sys
Type=none
Options=defaults,noexec,nosuid,nodev,bind,rprivate,nofail

[Install]
WantedBy=chr-proxyd.target