#!/bin/sh
exec 2>&1
[ -r ./conf ] && . ./conf
exec setpriv --reuid _blocky --regid _blocky --clear-groups \
	--ambient-caps -all,+net_bind_service \
	--inh-caps -all,+net_bind_service \
	--bounding-set -all,+net_bind_service \
	--no-new-privs -- blocky --config "${CONFFILE:-/etc/blocky/config.yml}"
