[Unit]
Description=Pi-KVM - Janus WebRTC Gateway (No Runner)
After=network.target network-online.target nss-lookup.target kvmd.service

[Service]
User=kvmd-janus
Group=kvmd-janus
Type=simple
Restart=always
RestartSec=3
AmbientCapabilities=CAP_NET_RAW
LimitNOFILE=65536
UMask=0117  # Crutch for UNIX socket perms

ExecStart=/usr/bin/janus --disable-colors --plugins-folder=/usr/lib/ustreamer/janus --configs-folder=/etc/kvmd/janus
TimeoutStopSec=5
KillMode=mixed

[Install]
WantedBy=multi-user.target