[Unit]
Description=VoiceCat Voice & Text Server
Documentation=https://github.com/org/voicecat
After=network.target

[Service]
Type=simple
User=voicecat
Group=voicecat
ExecStart=/usr/local/bin/voicecat-server --data-dir /var/lib/voicecat
Restart=on-failure
RestartSec=5s
# Allow binding port 8384 without running as root
AmbientCapabilities=CAP_NET_BIND_SERVICE
# Harden the process
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/voicecat
PrivateTmp=true

[Install]
WantedBy=multi-user.target