[Unit]
Description=Keep the WireGuard wg0 tunnel reachable for SSH
Documentation=man:wg-quick(8)

[Service]
Type=oneshot
# Never let a hung systemctl restart inside the script wedge the watchdog.
TimeoutStartSec=120
ExecStart=/usr/local/sbin/wg0-watchdog
StandardOutput=journal
StandardError=journal
Nice=10