[Unit]
Description=A small, simple, no bloat power manager.

[Service]
Type=notify
ExecStart=/usr/bin/pumopm
Restart=on-failure

# Disalow writing to /usr, /bin, /usr/bin... It shouldn’t, but just in case
ProtectSystem=yes
# I swear I’m not paranoid about my own program
NoNewPrivileges=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes

[Install]
WantedBy=default.target