[Unit]
Description=Blocky service
After=network-online.target

[Service]
User=blocky
ExecStart=/usr/local/bin/blocky --config /usr/local/etc/blocky/config.yaml
Restart=on-failure
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=network-online.target