transactional-update-notifier.service.in

[Unit]
Description=Transactional update notifications for %I
After=network.target
StartLimitIntervalSec=60
StartLimitBurst=4

[Service]
ExecStart=@bindir@/transactional-update-notifier daemon
Restart=on-failure
RestartSec=1
SuccessExitStatus=3 4
RestartForceExitStatus=3 4

# Hardening
ProtectSystem=full
PrivateTmp=true
SystemCallArchitectures=native
MemoryDenyWriteExecute=true
NoNewPrivileges=true

[Install]
WantedBy=default.target