[Unit] Description=Domain-restricted SRS reverse socketmap After=network.target postsrsd-srs.service Wants=postsrsd-srs.service [Service] Type=simple User=nobody Group=nogroup ExecStart=/usr/bin/python3 /usr/local/sbin/srs-reverse-map.py Restart=on-failure RestartSec=3 NoNewPrivileges=true ProtectSystem=strict ProtectHome=true PrivateTmp=true [Install] WantedBy=multi-user.target