[Unit] Description=Traefik reverse proxy After=network-online.target Wants=network-online.target [Service] Type=notify User=traefik Group=traefik ExecStart=/usr/local/bin/traefik --configFile=/etc/traefik/traefik.yml Restart=on-failure RestartSec=5 NoNewPrivileges=true AmbientCapabilities=CAP_NET_BIND_SERVICE CapabilityBoundingSet=CAP_NET_BIND_SERVICE [Install] WantedBy=multi-user.target