[Unit]
Description=RSSuper Background Sync Service
Documentation=man:rssuper(1)
After=network-online.target
Wants=network-online.target

[Service]
Type=oneshot
ExecStart=/opt/rssuper/bin/rssuper-sync
StandardOutput=journal
StandardError=journal

# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
PrivateTmp=yes

# Timeout (5 minutes)
TimeoutStartSec=300

[Install]
WantedBy=multi-user.target