[Unit] Description=RTP Receiver [Service] {# TODO: remove hardcoded IP #} ExecStart=/usr/local/bin/rtp-recv.sh 192.168.48.103 CapabilityBoundingSet=CAP_NET_BIND_SERVICE NoNewPrivileges=yes PrivateTmp=yes ProtectSystem=strict ProtectHome=yes ProtectKernelTunables=yes ProtectControlGroups=yes RestrictRealtime=yes RestrictAddressFamilies=AF_INET AF_INET6 [Install] WantedBy=multi-user.target