diff --git a/config/redbear-full.toml b/config/redbear-full.toml
index c13c4d36f6..67c802a186 100644
--- a/config/redbear-full.toml
+++ b/config/redbear-full.toml
@@ -583,6 +583,28 @@ cmd = "redbear-polkit"
 type = "oneshot_async"
 """
 
+[[files]]
+path = "/etc/init.d/18_dri-symlinks.service"
+data = """
+[unit]
+description = "DRI device symlinks for KWin libudev fallback"
+# Creates /dev/dri/renderD128 -> /scheme/drm/card0 so KWin's
+# libudev-based discovery finds the GPU even when KWIN_DRM_DEVICES
+# is not honored (libudev 252+ ignores KWIN_DRM_DEVICES if
+# the device is detectable via udev). This is the
+# libudev-discoverable fallback path; the primary path
+# is still KWIN_DRM_DEVICES=/scheme/drm/card0.
+requires_weak = [
+    "00_driver-manager.service",
+    "12_dbus.service",
+]
+
+[service]
+cmd = "/bin/sh"
+args = ["-c", "mkdir -p /dev/dri && ln -sfn /scheme/drm/card0 /dev/dri/card0 && ln -sfn /scheme/drm/card0 /dev/dri/renderD128 && ln -sfn /scheme/drm/card0 /dev/dri/controlD64"]
+type = "oneshot"
+"""
+
 [[files]]
 path = "/etc/init.d/19_redbear-authd.service"
 data = """