[Unit] Description=VPN Namespace Isolation After=network.target [Service] Type=oneshot RemainAfterExit=yes ExecStart=/opt/vpnwrap/nsctl.sh enable ExecStop=/opt/vpnwrap/nsctl.sh disable Restart=on-failure [Install] WantedBy=multi-user.target