[Unit]
Description=Configure Wake-on-LAN

[Service]
Type=oneshot
{% for interface in wakeonlan_interfaces %}
ExecStart=/usr/sbin/ethtool -s {{ interface }} wol {{ wakeonlan_options | join }}
{% endfor %}
RemainAfterExit=yes
NoNewPrivileges=yes
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=strict
ProtectHome=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
RestrictRealtime=yes
RestrictAddressFamilies=AF_UNIX AF_NETLINK
SystemCallArchitectures=native

[Install]
WantedBy=basic.target