usr/lib/systemd/system/anytun@.service

   1 [Unit]
   2 Description=secure anycast tunneling daemon for %i
   3 PartOf=anytun.service
   4 Requires=anytun-controld@%i.service
   5 Documentation=man:anytun(8)
   6
   7 [Service]
   8 Type=simple
   9 PIDFile=/run/anytun/%i.pid
  10 Environment="NAME=%i" "DAEMONOPTS=-D --username anytun"
  11 ExecStart=/usr/local/lib/anytun-launcher vpn
  12 Restart=on-failure
  13 PrivateTmp=yes
  14 ProtectSystem=full
  15 ProtectHome=yes
  16 DeviceAllow=/dev/net/tun rw
  17 DevicePolicy=closed
  18
  19 [Install]
  20 WantedBy=multi-user.target