[Unit]
Description=Distrobox automatic update for %I
After=network.target
StartLimitIntervalSec=60
StartLimitBurst=4

[Service]
ExecStart=/usr/bin/distrobox-upgrade --all
Restart=on-failure
RestartSec=1

# Hardening
ProtectSystem=full
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true

[Install]
WantedBy=default.target