[Unit]
Description=tomswall control-plane agent (pull and apply firewall config)
Documentation=https://git.unkin.net/unkin/tomswall
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
EnvironmentFile=/etc/tomswall/agent.env
ExecStart=/usr/sbin/tomswall agent
Restart=on-failure
RestartSec=10
# The agent programs nftables and needs the requisite capabilities.
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW

[Install]
WantedBy=multi-user.target