[Unit]
Description=PipeWire filter chain daemon

After=pipewire.service pipewire-session-manager.service
BindsTo=pipewire.service

[Service]
LockPersonality=yes
MemoryDenyWriteExecute=yes
NoNewPrivileges=yes
RestrictNamespaces=yes
SystemCallArchitectures=native
SystemCallFilter=@system-service
Type=simple
ExecStart=/usr/bin/pipewire -c filter-chain.conf
Restart=on-failure
Slice=session.slice

[Install]
Also=pipewire.socket
WantedBy=default.target