[Unit] Description=Glorytun on %I After=network.target [Service] Type=simple Restart=always ExecStart=@bindir@/glorytun-run /etc/glorytun/%i CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW [Install] WantedBy=multi-user.target