[Unit] Description=Glorytun on %I After=network.target [Service] Type=simple Restart=always ExecStart=@bindir@/glorytun-run /etc/glorytun/%i CapabilityBoundingSet=CAP_NET_ADMIN [Install] WantedBy=multi-user.target