[Unit]
Description=Syncplay TLS Fixer
Wants=network.target

[Service]
User=syncplay
Group=syncplay
ExecStart=/usr/bin/python3.10 /usr/local/bin/syncplay-proxy 8999 8997
ProtectSystem=strict
ProtectHome=yes
PrivateDevices=yes
PrivateTmp=yes
PrivateUsers=yes
ProtectKernelTunables=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
ReadWritePaths=/var/lib/syncplay
RestrictAddressFamilies=AF_INET6 AF_INET
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target