♻️ refactor(systemd): protonmail-bridge service

.config/systemd/user/protonmail-bridge.service

@@ -1,12 +1,26 @@
 [Unit]
-Description=Protonmail client bridge service
+Description=ProtonMail Bridge - ProtonMail IMAP and SMTP Bridge
-PartOf=graphical-session.target
+After=network.target
-After=graphical-session.target
 
 [Service]
-Type=exec
+Type=simple
-StandardOutput=journal
+ExecStart=/usr/bin/protonmail-bridge-core --noninteractive
-ExecStart=/usr/bin/protonmail-bridge --no-window
+Restart=always
+KillMode=process
+
+# Hardening
+PrivateTmp=true
+# ProtectHome=true
+ProtectSystem=full
+NoNewPrivileges=true
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+PrivateDevices=true
+# RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=true
+RestrictRealtime=true
+SystemCallArchitectures=native
 
 [Install]
-WantedBy=graphical-session.target
+WantedBy=default.target