diff --git a/examples/owncast-sample.service b/examples/owncast-sample.service
index e843fb063..3f0787b2b 100644
--- a/examples/owncast-sample.service
+++ b/examples/owncast-sample.service
@@ -3,11 +3,17 @@ Description=Owncast Service
 
 [Service]
 Type=simple
-WorkingDirectory=[path_to_owncast_root_directory]
-ExecStart=[path_to_owncast_executable]
-Restart=on-failure
+WorkingDirectory=[path to owncast directory]
+ReadWritePaths=[path to owncast directory]
+ExecStart=[path to owncast directory]/owncast
+Restart=always
 RestartSec=5
+User=[user to run owncast as]
+Group=[group to run owncast as]
+NoNewPrivileges=true
+SecureBits=noroot
+ProtectSystem=strict
+ProtectHome=read-only
 
 [Install]
 WantedBy=multi-user.target
-