# Serveur de contrôle — /etc/systemd/system/stream-control-server.service
# systemctl daemon-reload && systemctl enable --now stream-control-server

[Unit]
Description=Stream Control — serveur de contrôle
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=stream
WorkingDirectory=/opt/stream-control
Environment=NODE_ENV=production
ExecStart=/usr/bin/node --disable-warning=ExperimentalWarning packages/server/dist/index.js
Restart=always
RestartSec=5

# Durcissement
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/stream-control/data

[Install]
WantedBy=multi-user.target