[Unit] Description=Connect to a service running inside a network namespace using socket activation [Service] Type=notify User=nnss-sproxy-%i DynamicUser=yes # Add CONNECT_ADDR environment variable to below file. E.g. # echo CONNECT_ADDR=127.0.0.1:8080 > /etc/nnss/sproxy_myapp/env EnvironmentFile=/etc/nnss/sproxy_%i/env ExecStart=/usr/lib/systemd/systemd-socket-proxyd $CONNECT_ADDR # This should be a symlink to the actual network namespace file. E.g. # ln -snf /run/netns/torns /etc/nnss/sproxy_myapp/ns NetworkNamespacePath=/etc/nnss/sproxy_%i/ns