mpdisplay.service

[Unit]
Description=MPD-to-charlcd information display
Wants=dev-lcd.device
After=dev-lcd.device
After=network.target
After=mpd.service

[Service]
Type=simple
ExecStart=/usr/bin/mpdisplay
Restart=always

User=mpdisplay
Group=mpdisplay

NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
ProtectHostname=yes
ProtectKernelTunables=yes
ProtectKernelModules=yes
ProtectKernelLogs=yes
ProtectControlGroups=yes
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
RestrictNamespaces=yes
LockPersonality=yes
RestrictRealtime=yes
RestrictSUIDSGID=yes
RemoveIPC=yes

[Install]
WantedBy=multi-user.target