[Unit]
Description=AES67 Daemon
Wants=network-online.target
After=network.target network-online.target

[Service]
ExecStartPre=+/usr/sbin/modprobe MergingRavennaALSA
ExecStopPost=+/usr/sbin/modprobe -r MergingRavennaALSA
ExecStart=/bin/aes67-daemon --config /etc/aes67-linux/daemon.json
ProtectSystem=strict
ReadWritePaths=/var/lib/aes67-linux/ /etc/aes67-linux/daemon.json
ProtectHome=true
PrivateTmp=true
SystemCallFilter=~@mount
CapabilityBoundingSet=CAP_NET_ADMIN
ProtectKernelModules=true

[Install]
WantedBy=default.target