[Unit]
Description=Modern alternative webUI for qBittorrent
After=network-online.target
Wants=network-online.target
Documentation=https://github.com/autobrr/qui

[Service]
Type=simple
User=qui
Group=qui
Environment=HOME=/var/lib/qui
WorkingDirectory=/var/lib/qui
ExecStart=/usr/bin/qui serve
Restart=on-failure

ProtectSystem=strict
ReadWritePaths=/var/lib/qui
ProtectHome=yes
PrivateTmp=yes
PrivateDevices=yes
NoNewPrivileges=yes
ProtectKernelModules=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
CapabilityBoundingSet=
LockPersonality=yes
MemoryDenyWriteExecute=yes
RestrictAddressFamilies=AF_INET AF_INET6
SystemCallArchitectures=native
SystemCallFilter=@system-service

[Install]
WantedBy=multi-user.target