[Unit] Description=mihomo Daemon for %i. After=network.target NetworkManager.service systemd-networkd.service iwd.service [Service] Type=exec User=%i CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW CAP_NET_BIND_SERVICE Restart=on-abort ExecStart=/usr/bin/mihomo [Install] WantedBy=multi-user.target