feat: add Linux server operational delivery assets

2026-09-11 05:52:26 +00:00
parent 409b64a2fb
commit c709b27e5e
12 changed files with 412 additions and 50 deletions
@@ -0,0 +1,34 @@
+[Unit]
+Description=RVBox server
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=rvbox
+Group=rvbox
+ExecStartPre=/usr/local/bin/rvbox-server --check-config --config /etc/rvbox/server.toml
+ExecStart=/usr/local/bin/rvbox-server --config /etc/rvbox/server.toml
+Restart=on-failure
+RestartSec=5s
+TimeoutStopSec=35s
+WorkingDirectory=/var/lib/rvbox-server
+StateDirectory=rvbox-server
+RuntimeDirectory=rvbox
+RuntimeDirectoryMode=0750
+UMask=0077
+LimitNOFILE=65536
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+ReadWritePaths=/var/lib/rvbox-server /run/rvbox
+
+[Install]
+WantedBy=multi-user.target