[Unit]
Description=Clash-Meta Daemon for %i.
After=network.target NetworkManager.service systemd-networkd.service iwd.service

[Service]
Type=exec
User=%i
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE
Restart=on-abort
ExecStart=/usr/bin/clash-meta

[Install]
WantedBy=multi-user.target