[Unit]
Description=Syncplay IRC Bridge
Wants=network.target
After=syncplay.service stunnel.service
BindsTo=syncplay.service stunnel.service

[Service]
User=syncplay
Group=syncplay
ExecStart=/bin/bash /usr/local/bin/syncplay-bridge
ProtectSystem=strict
ProtectHome=yes
PrivateDevices=yes
PrivateTmp=yes
PrivateUsers=yes
ProtectKernelTunables=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
ReadWritePaths=/var/lib/syncplay
RestrictAddressFamilies=AF_INET6
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target