[Unit]
Description=BastionGuard USB Monitor
After=network.target systemd-udevd.service
Wants=systemd-udevd.service

[Service]
Type=simple
User=root
Group=root
ExecStart=/usr/bin/BastionGuard-usbd
Restart=on-failure

# FIX per DBus
ProtectSystem=off
ProtectHome=off
PrivateTmp=false

# Manteniamo sicurezza
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target