[Unit]
Description=Web UI for systemd-networkd
After=network.target

[Service]
ExecStart=/usr/local/bin/network-ui
WorkingDirectory=/var/lib/network-ui
User=network-ui
Group=network-ui
ProtectSystem=strict
ProtectHome=yes
NoNewPrivileges=yes
PrivateTmp=yes
AmbientCapabilities=CAP_SYS_BOOT CAP_NET_ADMIN

[Install]
WantedBy=multi-user.target