[Exec]
Hostname=matrix
ResolvConf=copy-host
Timezone=copy
PrivateUsers=pick
NoNewPrivileges=yes
LinkJournal=try-host

[Files]
PrivateUsersChown=yes
BindReadOnly=/etc/matrix-synapse/conf.d
BindReadOnly=/etc/matrix-synapse/homeserver.yaml
BindReadOnly=/etc/matrix-synapse/homeserver.signing.key
BindReadOnly=/etc/matrix-synapse/log.yaml
Bind=/var/local/matrix/matrix-synapse:/var/lib/matrix-synapse

[Network]
VirtualEthernet=no