[Unit]
Description=Lotus voice bridge (Discord voice <-> Matrix calls, nether-voicebridge)
After=network-online.target matrix-synapse.service
Wants=network-online.target

[Service]
Type=simple
User=lotus-voice
Group=lotus-voice
Environment=CONFIG_PATH=/etc/lotus-voice/config.toml
Environment=RUST_LOG=info
ExecStart=/opt/lotus-voice/lotus-voice-bridge
ExecReload=/bin/kill -HUP $MAINPID
Restart=on-failure
RestartSec=10
StandardOutput=journal
StandardError=journal
SyslogIdentifier=lotus-voice-bridge

# Resource limits (Opus encode/decode + LiveKit + Discord voice per call)
MemoryMax=1G
CPUQuota=150%

# Hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes
ReadWritePaths=/var/lib/lotus-voice /etc/lotus-voice

[Install]
WantedBy=multi-user.target