--- /dev/null
+[Unit]
+Description=secure anycast tunneling daemon for %i
+PartOf=anytun.service
+Requires=anytun-controld@%i.service
+Documentation=man:anytun(8)
+
+[Service]
+Type=simple
+PIDFile=/run/anytun/%i.pid
+Environment="NAME=%i" "DAEMONOPTS=-D --username anytun"
+ExecStart=/usr/local/lib/anytun-launcher vpn
+Restart=on-failure
+PrivateTmp=yes
+ProtectSystem=full
+ProtectHome=yes
+DeviceAllow=/dev/net/tun rw
+DevicePolicy=closed
+
+[Install]
+WantedBy=multi-user.target