(not strictly required to start the service)
with improvements suggested by Jörg Thalheim <joerg@thalheim.io>