[Unit]
Description=Private Tailnet proxy for SHiRE Agent Hub
Requires=shire-agent-hub.service
After=shire-agent-hub.service

[Service]
Type=notify
ExecStart=/usr/lib/systemd/systemd-socket-proxyd 127.0.0.1:8770
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true