[Unit] Description=Daemon to start Shadowsocks-rust-server Wants=network-online.target After=network.target [Service] # added automatically, for details please see # https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort ProtectSystem=full ProtectHome=true PrivateDevices=true ProtectHostname=true ProtectClock=true ProtectKernelTunables=true ProtectKernelModules=true ProtectKernelLogs=true ProtectControlGroups=true RestrictRealtime=true # end of automatic additions Type=forking PIDFile=/var/run/shadowsocks-rust-server.pid ExecStart=/usr/bin/ssserver --log-without-time -c /etc/shadowsocks/shadowsocks-rust.json --tcp-fast-open Restart=on-failure User=shadowsocks Group=shadowsocks [Install] WantedBy=multi-user.target