After=network-online.target Wants=network-online.target [Service] Type=notify User=captive-portal Group=captive-portal AmbientCapabilities=CAP_NET_ADMIN ExecStartPre=!mkdir -p /run/captive-portal ExecStartPre=!chown captive-portal:www-data /run/captive-portal ExecStartPre=!chmod 0750 /run/captive-portal WorkingDirectory=/usr/local/lib/captive-portal/ ExecStart=/bin/gunicorn --workers 2 --bind unix:/run/captive-portal/socket captive_portal:app