- [Unit]
 
- Description=sing-box service
 
- Documentation=https://sing-box.sagernet.org
 
- After=network.target nss-lookup.target
 
- [Service]
 
- CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
 
- AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_SYS_PTRACE CAP_DAC_READ_SEARCH
 
- ExecStart=/usr/bin/sing-box -D /var/lib/sing-box-%i -c /etc/sing-box/%i.json run
 
- ExecReload=/bin/kill -HUP $MAINPID
 
- Restart=on-failure
 
- RestartSec=10s
 
- LimitNOFILE=infinity
 
- [Install]
 
- WantedBy=multi-user.target
 
 
  |