[Unit]
Description=w3cs WebTransport bridge (QUIC command planes)
After=network-online.target
Wants=network-online.target

[Service]
# One bridge serves every seat: /seat/N on UDP 4443 attaches to the seat's
# relay WebSocket planes on 8144+N. Root only because the Let's Encrypt
# private key behind /etc/ssl/w3cs is root-owned.
ExecStart=/usr/local/sbin/w3cs-wt-bridge
Restart=always
RestartSec=2
NoNewPrivileges=yes

[Install]
WantedBy=multi-user.target