[Unit] Description=Crab Router Wants=network-online.target After=network-online.target [Service] Type=simple User=nobody ExecStart=/usr/bin/crab router Environment="CRAB_ROUTER_HOST=0.0.0.0" # Allow port 80 bind AmbientCapabilities=CAP_NET_BIND_SERVICE NoNewPrivileges=yes # More protections, because why not PrivateDevices=yes PrivateTmp=yes ProtectSystem=full [Install] RequiredBy=multi-user.target