#!/bin/sh
grep '^tlstunnel' /etc/group >/dev/null || addgroup -S tlstunnel 2>/dev/null
grep '^tlstunnel' /etc/passwd >/dev/null || adduser -SDh/var/lib/tlstunnel \
	-s/sbin/nologin -Gtlstunnel -gtlstunnel tlstunnel tlstunnel 2>/dev/null
setcap 'cap_net_bind_service=+ep' /usr/bin/tlstunnel