[Unit]
Description=Wolfenstein: Enemy Territory UDP relay + master heartbeat
After=network-online.target
Wants=network-online.target

[Service]
ExecStart=/usr/local/bin/etrelay @UPSTREAM@ @ARGS@
Restart=always
RestartSec=2
# One socket per client session, at most 2048 (MAX_SESSIONS): room above it.
LimitNOFILE=4096
# ETRELAY_CONTROL_TOKEN=... for --control (what servers register with); read by systemd,
# root only (0600).
EnvironmentFile=-/etc/etrelay/env
# /var/lib/etrelay: the registered servers and their bans, kept across restarts and
# upgrades.
StateDirectory=etrelay

# Ports 27960 and up > 1024: no privilege needed.
DynamicUser=yes
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target