[Unit]
Description=Geph4 bridge Service
After=network.target nss-lookup.target

[Service]
DynamicUser=true
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
NoNewPrivileges=true
EnvironmentFile=/etc/default/geph4-bridge
ExecStart=/usr/bin/geph4-bridge $OPTIONS --bridge-secret $BRIDGE_SECRET
Restart=on-abort

[Install]
WantedBy=multi-user.target