[Unit]
Description=traefik
Wants=network.target
After=network.target

[Service]
EnvironmentFile=-/etc/{% if grains['os_family'] == 'Debian' %}default{% else %}sysconfig{% endif %}/traefik
ExecStart=/usr/local/bin/traefik --configfile="{{ config_file }}"
ExecReload=/bin/kill -HUP $MAINPID
User={{ user }}
Group={{ group }}
Restart=on-failure
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
AmbientCapabilities=CAP_NET_BIND_SERVICE
SecureBits=keep-caps
NoNewPrivileges=yes
KillSignal=TERM

[Install]
WantedBy=multi-user.target