[Unit]
Description=Enqueueing facility for restricted clients of nullmailer
After=networking.target

[Service]
ExecStart=/usr/local/sbin/nullmailer-queued
RuntimeDirectory=nullmailer
ReadWritePaths=/var/spool/nullmailer
ProtectSystem=strict
ProtectControlGroups=yes
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target