From 9b2bb1917c5bcd94a86155ef0f8750b03658ee2b Mon Sep 17 00:00:00 2001
From: Tai Groot <tai@taigrr.com>
Date: Wed, 11 Mar 2026 00:09:35 +0000
Subject: [PATCH] fix: use default.target for user systemd units

User units don't have multi-user.target. Also removed User/Group
and hardening directives that don't apply to user services.
---
 deploy/github-to-signal.service | 13 ++-----------
 deploy/signal-cli-bot.service   | 12 +-----------
 2 files changed, 3 insertions(+), 22 deletions(-)

diff --git a/deploy/github-to-signal.service b/deploy/github-to-signal.service
index a1d8dcc..8613831 100644
--- a/deploy/github-to-signal.service
+++ b/deploy/github-to-signal.service
@@ -6,18 +6,9 @@ Requires=signal-cli-bot.service
 [Service]
 Type=exec
 ExecStart=/usr/local/bin/github-to-signal
-WorkingDirectory=/etc/github-to-signal
+WorkingDirectory=/home/tai/code/foss/github-to-signal
 Restart=on-failure
 RestartSec=5
 
-# Hardening
-NoNewPrivileges=true
-ProtectSystem=strict
-ProtectHome=true
-PrivateTmp=true
-
-User=signal-bot
-Group=signal-bot
-
 [Install]
-WantedBy=multi-user.target
+WantedBy=default.target
diff --git a/deploy/signal-cli-bot.service b/deploy/signal-cli-bot.service
index 521e9b4..f9b62ce 100644
--- a/deploy/signal-cli-bot.service
+++ b/deploy/signal-cli-bot.service
@@ -9,15 +9,5 @@ ExecStart=/usr/local/bin/signal-cli -a +18134455076 daemon --http 127.0.0.1:8081
 Restart=on-failure
 RestartSec=5
 
-# Hardening
-NoNewPrivileges=true
-ProtectSystem=strict
-ProtectHome=read-only
-PrivateTmp=true
-ReadWritePaths=/home/signal-bot/.local/share/signal-cli
-
-User=signal-bot
-Group=signal-bot
-
 [Install]
-WantedBy=multi-user.target
+WantedBy=default.target