[Unit]
Description=htop process viewer
Conflicts=gtty@tty1.service

[Service]
ExecStart=/usr/bin/htop --readonly
TTYPath=/dev/tty1
StandardInput=tty
StandardOutput=tty
StandardError=journal
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
#PrivateDevices=true
PrivateNetwork=true
ProtectKernelTunables=true
ProtectKernelModules=true
CapabilityBoundingSet=
NoNewPrivileges=true