[Unit]
Description=YouTube Voice Capture Ingest (one-shot)
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
User=nextcloud-talk-assistant
Group=nextcloud-talk-assistant
EnvironmentFile=/etc/nextcloud-talk-assistant/env
ExecStart=/opt/youtube-capture-ingest/venv/bin/python /opt/youtube-capture-ingest/youtube_capture_ingest.py --config /etc/youtube-capture-ingest/config.json
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/var/lib/youtube-capture-ingest /var/log/youtube-capture-ingest
Environment=HOME=/var/lib/youtube-capture-ingest