[Unit]
Description=copyparty file server

[Service]
Type=notify
SyslogIdentifier=copyparty
Environment=PYTHONUNBUFFERED=x
ExecReload=/bin/kill -s USR1 $MAINPID
PermissionsStartOnly=true

User=ajchen
Group=ajchen
WorkingDirectory=/home/ajchen/copyparty
Environment=XDG_CONFIG_HOME=/home/ajchen/copyparty/.config

# AmbientCapabilities=CAP_NET_BIND_SERVICE

MemoryMax=50%
MemorySwapMax=50%
ProtectClock=true
ProtectControlGroups=true
ProtectHostname=true
ProtectKernelLogs=true
ProtectKernelModules=true
ProtectKernelTunables=true
ProtectProc=invisible
RemoveIPC=true
RestrictNamespaces=true
RestrictRealtime=true
RestrictSUIDSGID=true

# LogsDirectory=copyparty

ExecStart=/usr/bin/python3 /home/ajchen/copyparty/copyparty-sfx.py -c /home/ajchen/copyparty/loader.conf

[Install]
WantedBy=multi-user.target