[Unit]
Description=Keyboard Middleware Niri Window Watcher
Documentation=https://github.com/fibsussy/keymux
After=graphical-session.target
Requires=graphical-session.target

[Service]
Type=simple
ExecStart=/usr/bin/keymux niri-daemon
Restart=on-failure
RestartSec=5
Environment="RUST_LOG=info"

# Security hardening
PrivateTmp=true
ProtectSystem=strict
ProtectHome=read-only
NoNewPrivileges=true
RestrictNamespaces=true
RestrictRealtime=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectControlGroups=true

[Install]
WantedBy=graphical-session.target