[Unit]
Description=Zero Tunnel
After=network-online.target

[Service]
Type=simple
EnvironmentFile=/opt/ibms/zero/zero-tunnel.env
User=root
UMask=0007
AmbientCapabilities=CAP_NET_ADMIN
ExecStartPre=/opt/ibms/zero/zero-tunnel.sh
ExecStart=/opt/ibms/zero/zero-tunnel run --verbose=${ZERO_VERBOSE} --dns-ip-range=${ZERO_DNS_IP_RANGE} --identity-dir=${ZERO_IDENTITY_DIR}
Restart=always
RestartSec=3

[Install]
WantedBy=multi-user.target