[Unit]
Description=Open Source Conditional Access Module
Wants=pcscd.service
After=tmp.mount network.target

[Service]
Type=forking
ExecStart=/usr/bin/ncam -b
User=ncam
ConfigurationDirectory=ncam
LogsDirectory=ncam
PrivateTmp=yes
ProtectHome=yes
ProtectSystem=strict
NoNewPrivileges=yes
AmbientCapabilities=CAP_NET_BIND_SERVICE

[Install]
WantedBy=multi-user.target