[Unit]
Description=Contest firewall proxy (checks the site name of HTTPS connections)
After=network.target firewall.service
PartOf=firewall.service
# Started and stopped with firewall.service (no [Install] section on purpose)

[Service]
Type=simple
ExecStartPre=/usr/sbin/nginx -t -q -c /etc/contest-firewall/contest-proxy.conf
ExecStart=/usr/sbin/nginx -c /etc/contest-firewall/contest-proxy.conf -g 'daemon off;'
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=2