[Unit]
Description=Proxy Station njcq WireGuard agent
After=network-online.target wg-quick@wg-njcq.service
Wants=network-online.target

[Service]
Type=simple
ExecStart=/usr/bin/python3 /opt/proxy-station-wg/agent.py
Restart=on-failure
RestartSec=15
UMask=0077
NoNewPrivileges=true
ProtectHome=true
ProtectSystem=strict
ReadWritePaths=/etc/wireguard /run
CapabilityBoundingSet=CAP_NET_ADMIN CAP_DAC_READ_SEARCH

[Install]
WantedBy=multi-user.target