[Unit]
Description=Shadowsocks2
Wants=network-online.target
After=network-online.target

[Service]
User=root
ExecStart=/usr/bin/go-shadowsocks2 -s 'ss://AEAD_AES_256_GCM:whatistruth@:8080' -verbose
Nice=-10
KillMode=process
Restart=on-failure
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
PrivateDevices=true
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target