[Unit]
Description=Keyboard Middleware Async Root Daemon
Documentation=https://github.com/fibsussy/keymux
After=local-fs.target

[Service]
Type=simple
ExecStart=/usr/bin/keymux daemon
Restart=always
RestartSec=5
Environment="RUST_LOG=info"
# Async runtime benefits from multiple threads
Environment="TOKIO_WORKER_THREADS=4"

# Capabilities needed for input device access
CapabilityBoundingSet=CAP_DAC_OVERRIDE CAP_SYS_RAWIO CAP_SETUID CAP_SETGID

# Filesystem access
# Note: Need to access /sys/class/input for device enumeration
# and /home/*/config for user configs
ProtectHome=no
ReadWritePaths=/run

# Additional sandboxing
NoNewPrivileges=true
PrivateTmp=true
RestrictRealtime=true

[Install]
WantedBy=multi-user.target