Insecure stretching reminder using giphy, jq and systemd timers

stretch.service

[Unit]
Description=Stretching Reminder

[Service]
User=username
Environment=DISPLAY=:0
Type=oneshot
ExecStart=/path-to/stretch.sh

stretch.sh

#! /bin/sh

echo "Starting Stretch Reminder"
API_KEY='Giphy-Api-Key'

echo "Querying Giphy"
JSON=$(curl "https://api.giphy.com/v1/gifs/random?tag=stretch&fmt=json&api_key=$API_KEY")

echo "Parsing JSON"
GIF_URL=$(echo "$JSON" | jq -r '.data.image_original_url')

echo "Download file"
TEMP_FILE="$(mktemp -u).gif"
wget "$GIF_URL" -O "$TEMP_FILE"

echo "Opening gif: $TEMP_FILE"
eog "$TEMP_FILE"; rm "$TEMP_FILE"

stretch.timer

[Unit]
Description=Stretching Reminder Timer

[Timer]
OnUnitActiveSec=1h
OnBootSec=1h

[Install]
WantedBy=timers.target