mirror of
https://github.com/paperclipai/paperclip.git
synced 2026-10-28 20:21:50 +01:00
DottaandPaperclip
1696e17c67
Add the bounded reserve/expose/remove broker handshake, paired-port contracts, hostname discovery, deployable systemd unit, and focused authorization/lifecycle tests. Co-Authored-By: Paperclip <noreply@paperclip.ing>
27 lines
775 B
Desktop File
27 lines
775 B
Desktop File
[Unit]
|
|
Description=Paperclip Tailscale HTTPS broker
|
|
After=tailscaled.service
|
|
Requires=tailscaled.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=paperclip-tsbroker
|
|
Group=paperclip-tsbroker-sock
|
|
EnvironmentFile=/etc/paperclip/tailscale-https-broker.env
|
|
ExecStart=/usr/bin/node /opt/paperclip/packages/tailscale-https-broker/dist/main.js
|
|
Restart=on-failure
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectHome=true
|
|
ProtectSystem=strict
|
|
RuntimeDirectory=paperclip-tailscale-broker
|
|
RuntimeDirectoryMode=0750
|
|
StateDirectory=paperclip-tailscale-broker
|
|
StateDirectoryMode=0700
|
|
LogsDirectory=paperclip-tailscale-broker
|
|
LogsDirectoryMode=0700
|
|
ReadWritePaths=/run/paperclip-tailscale-broker /var/lib/paperclip-tailscale-broker /var/log/paperclip-tailscale-broker
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|