[Unit]
Description=satyr livestreaming server
After=network.target

[Service]
KillMode=control-group
Restart=on-failure

User=satyr
Environment="HOME=/var/lib/satyr"
WorkingDirectory=/opt/satyr
ExecStart=/usr/bin/npm run start

PrivateTmp=true
ProtectHome=true
ProtectSystem=full
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target