Use systemd and socket activation from upstream

debian/ngircd.service

@@ -4,9 +4,19 @@ After=network.target
 
 [Service]
 Type=forking
+User=irc
+Group=irc
+CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=full
+ProtectHome=true
+NoNewPrivileges=true
+RuntimeDirectory=ngircd
+RuntimeDirectoryMode=750
 ExecStart=/usr/sbin/ngircd
-PIDFile=/var/run/ngircd/ngircd.pid
 ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
 
 [Install]
 WantedBy=multi-user.target

debian/ngircd.socket

@@ -0,0 +1,11 @@
+[Unit]
+Description=Next Generation IRC Daemon (Socket)
+
+[Socket]
+BindIPv6Only=ipv6-only
+ListenStream=0.0.0.0:6667
+#ListenStream=[::]:6667
+IPTOS=low-delay
+
+[Install]
+WantedBy=sockets.target