[Unit]
Description=CNP-HTTP and CNM-HTML translating reverse proxy
After=network.target

[Service]
Type=simple
ExecStart=/usr/local/bin/cn-http -listen localhost:9000 -cnp-host contnet.org
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
InaccessibleDirectories=/home
ReadOnlyDirectories=/
CapabilityBoundingSet=
LimitFSIZE=0
DeviceAllow=/dev/null rw
MemoryDenyWriteExecute=yes
User=nobody
Group=nogroup
WorkingDirectory=/var/contnet/cn-http
Restart=always
RestartSec=10s

[Install]
WantedBy=multi-user.target