systemd-nspawn-plex example service file

nspawn-plex.service

[Unit]
Description=Container Plex
Documentation=man:systemd-nspawn(1)
PartOf=machines.target
Before=machines.target
After=network.target zfs-mount.service

[Service]
ExecStart=/usr/bin/systemd-nspawn \
        --quiet \
        --keep-unit \
	--boot \
	--link-journal=try-guest \
	--bind-ro=/srv/data/media \
	--machine=plex
KillMode=mixed
Type=notify
RestartForceExitStatus=133
SuccessExitStatus=133
Slice=machine.slice
Delegate=yes
TasksMax=16384

DevicePolicy=closed
DeviceAllow=/dev/net/tun rwm
DeviceAllow=char-pts rw

DeviceAllow=/dev/loop-control rw
DeviceAllow=block-loop rw
DeviceAllow=block-blkext rw

[Install]
WantedBy=machines.target