[Unit]
Description=PC Anti-Freeze Monitor - System Crash Prevention
Documentation=man:pc-monitor(8)
After=multi-user.target graphical-session.target
Wants=multi-user.target

[Service]
Type=simple
ExecStart=/usr/local/bin/pc-monitor
ExecReload=/bin/kill -HUP $MAINPID
KillMode=process
Restart=always
RestartSec=10
User=root
Group=root

# Security settings
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/log /var/run /tmp
PrivateTmp=true
ProtectKernelTunables=false
ProtectKernelModules=true
ProtectControlGroups=false

# Resource limits
LimitNOFILE=1024
LimitNPROC=512

# Environment
Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

[Install]
WantedBy=multi-user.target