[Unit] Description=RTP Sender [Service] {# TODO: remove hardcoded IP #} ExecStart=/usr/local/bin/rtp-send.sh 192.168.48.102 Restart=always RestartSecs=1s StartLimitBurst=10 StartLimitIntervalSec=5s CapabilityBoundingSet=CAP_NET_BIND_SERVICE NoNewPrivileges=yes PrivateTmp=yes ProtectSystem=strict ProtectHome=yes ProtectKernelTunables=yes ProtectControlGroups=yes RestrictRealtime=yes RestrictAddressFamilies=AF_INET AF_INET6 [Install] WantedBy=multi-user.target