[Unit] Description=Shadowsocks-Rust Client Service After=network.target Wants=network-online.target [Service] Type=simple DynamicUser=yes NoNewPrivileges=yes CapabilityBoundingSet=CAP_NET_BIND_SERVICE CAP_NET_ADMIN AmbientCapabilities=CAP_NET_BIND_SERVICE CAP_NET_ADMIN ExecStart=/usr/bin/ssservice local --log-without-time -c /etc/shadowsocks-rust/%i.json [Install] WantedBy=multi-user.target