[Unit]
Description="Xe Iaso's TLS relay daemon"

[Service]
ExecStart=/usr/bin/relayd
Restart=always
RestartSec=30s
EnvironmentFile=/etc/within.website/x/relayd.env
LimitNOFILE=infinity
DynamicUser=true
CacheDirectory=relayd
CacheDirectoryMode=0755
StateDirectory=relayd
StateDirectoryMode=0755
ReadWritePaths=/run
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target