[Unit] Description = sidewindow [Service] Type=simple User=sidewindow Environment=PORT=5665 ExecStart=/usr/local/bin/sidewindow PrivateTmp=true ProtectSystem=full ProtectHome=true NoNewPrivileges=true [Install] WantedBy=multi-user.target