[Unit]
Description=Clash Web management
After=network-online.target clashweb-mihomo.service
Wants=network-online.target

[Service]
Type=simple
User=clashweb
Group=clashweb
SupplementaryGroups=clashweb-core
EnvironmentFile=/etc/clashweb/env
ExecStart=/usr/local/bin/clashweb
Restart=on-failure
RestartSec=3
UMask=0027
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/var/lib/clashweb /var/lib/clashweb-core
RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX AF_NETLINK

[Install]
WantedBy=multi-user.target