[Service]
LimitNOFILE=524288
AmbientCapabilities=CAP_NET_RAW CAP_NET_BIND_SERVICE