Fix settings security tab navigation

scripts/systemd/pulse-update.service

@@ -0,0 +1,35 @@
+[Unit]
+Description=Automatic Pulse update check and install
+Documentation=https://github.com/rcourtman/Pulse
+After=network-online.target
+Wants=network-online.target
+# Don't run if pulse service is not running
+Requisite=pulse.service
+
+[Service]
+Type=oneshot
+# Run as root to allow service restart
+User=root
+Group=root
+# Use the update script
+ExecStart=/opt/pulse/scripts/pulse-auto-update.sh
+# Restart policy for the update service itself
+Restart=no
+# Timeout for the update process (10 minutes should be plenty)
+TimeoutStartSec=600
+# Log to journal
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=pulse-update
+# Security hardening
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=strict
+ReadWritePaths=/opt/pulse /etc/pulse /tmp
+# Network access needed for GitHub
+PrivateNetwork=no
+# Nice level to run updates at lower priority
+Nice=10
+
+[Install]
+WantedBy=multi-user.target

scripts/systemd/pulse-update.timer

@@ -0,0 +1,19 @@
+[Unit]
+Description=Daily check for Pulse updates
+Documentation=https://github.com/rcourtman/Pulse
+After=network-online.target
+Wants=network-online.target
+
+[Timer]
+# Run daily at 2 AM with a random delay up to 4 hours
+# This spreads the load on GitHub and prevents all instances updating at once
+OnCalendar=daily
+OnCalendar=02:00
+RandomizedDelaySec=4h
+# Persist the last trigger time during downtime
+Persistent=true
+# Ensure we run if the system was off when scheduled
+AccuracySec=1h
+
+[Install]
+WantedBy=timers.target