[Unit]
Description=FilyX Music Bridge secure WebSocket relay
After=network-online.target mariadb.service
Wants=network-online.target

[Service]
Type=simple
User=debian
Group=www-data
WorkingDirectory=/srv/filyx/apps/music-bridge-relay
Environment=NODE_ENV=production
EnvironmentFile=/srv/filyx/.env
ExecStart=/usr/local/bin/node src/server.mjs
Restart=always
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true
ProtectHome=true
ProtectSystem=full
ReadWritePaths=/srv/filyx/apps/web/storage/music-artwork

[Install]
WantedBy=multi-user.target