[Unit]
Description=Pi-KVM - Janus WebRTC Gateway
After=network.target network-online.target nss-lookup.target kvmd.service

[Service]
User=kvmd-janus
Group=kvmd-janus
Type=simple
Restart=always
RestartSec=3
AmbientCapabilities=CAP_NET_RAW
LimitNOFILE=65536
UMask=0117  # Crutch for UNIX socket perms

ExecStart=/usr/bin/kvmd-janus --run
TimeoutStopSec=5
KillMode=mixed

[Install]
WantedBy=multi-user.target