[Unit]
Description=Maglev health-checker daemon
Documentation=man:maglevd(8)
After=network-online.target
Wants=network-online.target

[Service]
User=maglevd
Group=maglevd
EnvironmentFile=/etc/default/vpp-maglev
ExecStart=/usr/sbin/maglevd --config ${MAGLEV_CONFIG}
Restart=on-failure
RestartSec=5s
Type=simple

# Grant only CAP_NET_RAW (needed for ICMP probes) and drop everything else.
AmbientCapabilities=CAP_NET_RAW
CapabilityBoundingSet=CAP_NET_RAW
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target