[Unit] Description=Matrix Screen isolated media converter %i After=matrix-screen-controller.service [Service] Type=oneshot WorkingDirectory=/opt/matrix-screen-controller Environment=MATRIX_DATA_DIR=/var/lib/matrix-screen-controller Environment=MATRIX_RUNTIME_DIR=/run/matrix-screen-controller Environment=PYTHONDONTWRITEBYTECODE=1 ExecStart=/usr/bin/flock --exclusive /run/matrix-screen-controller/converter.lock /opt/matrix-screen-controller/.venv/bin/python -m app.media.worker %i AllowedCPUs=0 1 CPUAffinity=0 1 CPUQuota=150% MemoryMax=384M MemorySwapMax=0 IOWeight=10 Nice=10 PrivateNetwork=yes NoNewPrivileges=yes ProtectSystem=strict ProtectHome=yes ReadWritePaths=/var/lib/matrix-screen-controller /run/matrix-screen-controller TimeoutStartSec=4h