Initial commit

media-sorter.service

@@ -0,0 +1,34 @@
+[Unit]
+Description=Media Sorter - Reliable High-Performance Media Organization Service
+After=network.target local-fs.target remote-fs.target
+Documentation=https://github.com/example/media-sorter
+
+[Service]
+Type=simple
+User=mediasorter
+Group=mediasorter
+WorkingDirectory=/opt/media-sorter
+ExecStart=/opt/media-sorter/.venv/bin/media-sorter server
+Restart=on-failure
+RestartSec=5s
+
+# Process and Resource Sandboxing
+NoNewPrivileges=true
+ProtectSystem=full
+ProtectHome=read-only
+PrivateTmp=true
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictRealtime=true
+
+# Environment and I/O scheduling
+Environment=PYTHONUNBUFFERED=1
+LimitNOFILE=65535
+Nice=10
+IOSchedulingClass=best-effort
+IOSchedulingPriority=6
+
+[Install]
+WantedBy=multi-user.target