26 lines
704 B
Desktop File
26 lines
704 B
Desktop File
[Unit]
|
|
Description=Quinn admin/api consolidated service (canonical origin on black)
|
|
After=network-online.target docker.service
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
EnvironmentFile=/etc/quinn-admin-api/secrets.env
|
|
# Bind to the WireGuard mesh interface only — never reachable from public.
|
|
Environment=HOST=10.0.0.11
|
|
Environment=PORT=3023
|
|
Environment=NODE_ENV=production
|
|
ExecStart=/usr/bin/node --max-old-space-size=512 /opt/quinn-admin-api/dist/server.node.js
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
User=quinn-api
|
|
Group=quinn-api
|
|
# Hardening
|
|
NoNewPrivileges=true
|
|
ProtectSystem=strict
|
|
ProtectHome=true
|
|
ReadWritePaths=/opt/quinn-admin-api/data
|
|
PrivateTmp=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|