[Service]
# access gpu for rendering
DeviceAllow=char-drm rw