[Unit]
Description=Drum Pedal Keyboard simple keyboard macros dispatcher
After=multi-user.target

[Service]
# Add your device here. Example:
# Environment="DPK_INPUT_DEVICE=/dev/input/by-id/mouse"

ExecStart=/usr/local/bin/dpk
RuntimeDirectory=dpk
SupplementaryGroups=input uinput
DeviceAllow=char-input r
DeviceAllow=/dev/uinput rw

SystemCallFilter=@system-service
ProtectProc=invisible
DynamicUser=true
NoNewPrivileges=true
MemoryDenyWriteExecute=true
LockPersonality=true
RestrictRealtime=true
RestrictSUIDSGID=true
RemoveIPC=true
SystemCallFilter=~@mount
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
PrivateNetwork=true
PrivateUsers=true
ProtectHostname=true
ProtectClock=true
ProtectKernelTunables=true
ProtectKernelModules=true
ProtectKernelLogs=true
ProtectControlGroups=true
SystemCallArchitectures=native
RestrictAddressFamilies=AF_UNIX AF_NETLINK 
CapabilityBoundingSet=


[Install]
WantedBy=multi-user.target