[Unit]
Description=Isolated video rendering API
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=video-render
Group=video-render
WorkingDirectory=/opt/video-render
EnvironmentFile=/etc/video-render.env
ExecStart=/usr/bin/node /opt/video-render/current/server.cjs
Restart=on-failure
RestartSec=5
KillMode=control-group
TimeoutStopSec=10
CPUQuota=400%
MemoryHigh=6G
MemoryMax=8G
TasksMax=128
Nice=10
IOSchedulingClass=best-effort
IOSchedulingPriority=7
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/video-render
UMask=0077

[Install]
WantedBy=multi-user.target