[Unit]
Description=XMPP Messsage Forwarding Bot
Wants=network-online.target
After=network-online.target

[Install]
WantedBy=default.target

[Service]
ExecStart=/usr/bin/python3 -m forwardxmpp --config-file /etc/forwardxmpp/config.ini

DynamicUser=true

DevicePolicy=closed
MemoryDenyWriteExecute=true
PrivateDevices=true
PrivateNetwork=false
PrivateTmp=true
PrivateUsers=true
ProtectControlGroups=true
ProtectHome=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectSystem=strict
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6 AF_NETLINK
RestrictNamespaces=true
RestrictRealtime=true

CapabilityBoundingSet=
NoNewPrivileges=true

SystemCallFilter=~@clock @cpu-emulation @debug @module @mount @obsolete