For documentation on step-ca.service, see Running step-ca As A Daemon.

See also: There is a systemd certificate renewal timer, in the systemd directory of smallstep/cli.