systemd chrome

[Unit]
Description=Headless Chrome
Requires=network.target
After=multi-user.target

[Service]
LimitNOFILE=100
Restart=on-failure
Type=simple

ExecStart=/usr/bin/chromium-browser --temp-profile --headless --disable-gpu --disable-software-rasterizer --disable-dev-shm-usage --remote-debugging-port=9222 --hide-scrollbars
User=chrome
Group=chrome

# Strip off all privileges
NoNewPrivileges=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

# Rigid filesystem protection
ProtectSystem=full
ProtectHome=true
PrivateDevices=true
Environment=HOME=/tmp

# CGroup ruling
MemoryLimit=128M

[Install]
WantedBy=multi-user.target