[Unit]
Description=cellular-proxy (proxy egress via cellular iface)
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
EnvironmentFile=-@INSTALL_DIR@/etc/runtime.env
ExecStartPre=/bin/mkdir -p /var/lib/cellular-proxy @LOG_DIR@
ExecStart=@INSTALL_DIR@/bin/sing-box run -c @INSTALL_DIR@/etc/config.json
Restart=on-failure
RestartSec=3
LimitNOFILE=65535
# 低内存设备软上限（install 时替换；0 则删除本行）
MemoryMax=@MEMORY_MAX@
NoNewPrivileges=true
ProtectSystem=full
ProtectHome=true
PrivateTmp=true
StandardOutput=append:@LOG_DIR@/stdout.log
StandardError=append:@LOG_DIR@/stderr.log

[Install]
WantedBy=multi-user.target