[Unit]
Description=IB Gateway (paper) logged in by IBC, headless under Xvfb
After=network-online.target

[Service]
Type=simple
# No proxy env on purpose: mihomo TUN (auto-route) transparently routes all
# traffic by rules; IBKR domains go DEFAULT -> RES residential exit.
ExecStart=/usr/bin/xvfb-run -a -s "-screen 0 1024x768x24" %h/ibc/gatewaystart.sh -inline
Restart=always
RestartSec=60

[Install]
WantedBy=default.target