# Dedicated Starsync server (no display needed).
# Install: unpack the release tarball to /opt/starsync (the unit only uses
# the starsync-server binary in it), copy this file to
# /etc/systemd/system/, then `systemctl enable --now starsync`.
# An install from before the rename (/opt/watch-together, unit
# watch-together, ExecStart .../watch-together-server) keeps working
# unchanged: the archive still ships watch-together-server as a launcher.
# Flags: --port <n> (default 8080), --secret <password> (empty = open
# server, anyone who can reach the port can join), --name, --media <file>,
# --advertise-host <host>, --no-yt-dlp, --yt-dlp-dir <dir>, --config
# <file.yaml|json>. See README. The server's yt-dlp (for web page links it
# fetches) is downloaded into the state directory below.
# Prefer --config with a root-only file over --secret here: unit files and
# process lists are readable by other users.

[Unit]
Description=Starsync dedicated server
After=network-online.target
Wants=network-online.target

[Service]
ExecStart=/opt/starsync/starsync-server --port 8080 --secret change-me
Restart=on-failure
DynamicUser=true
StateDirectory=starsync
NoNewPrivileges=true

[Install]
WantedBy=multi-user.target