[Unit]
Description=Next Generation IRC Daemon
Documentation=man:ngircd(8) man:ngircd.conf(5)
After=network.target

[Service]
Type=forking
ExecStart=/usr/sbin/ngircd
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
User=irc
Group=irc
CapabilityBoundingSet=CAP_SETUID CAP_SETGID CAP_SYS_CHROOT CAP_NET_BIND_SERVICE
NoNewPrivileges=true
PrivateTmp=yes
PrivateDevices=yes
ProtectSystem=full
ProtectHome=true
RuntimeDirectoryMode=750
RuntimeDirectory=ngircd

[Install]
WantedBy=multi-user.target