diff options
Diffstat (limited to 'packaging')
| -rw-r--r-- | packaging/systemd/meshbay-node.service | 11 |
1 files changed, 8 insertions, 3 deletions
diff --git a/packaging/systemd/meshbay-node.service b/packaging/systemd/meshbay-node.service index e64934f..edff7f1 100644 --- a/packaging/systemd/meshbay-node.service +++ b/packaging/systemd/meshbay-node.service @@ -1,5 +1,5 @@ [Unit] -Description=MeshBay Node — local file host and streaming server +Description=MeshBay Node — P2P file host, streaming, and chat Documentation=https://meshbay.org/docs After=network-online.target Wants=network-online.target @@ -12,18 +12,23 @@ Group=%i # Per-user service: systemctl enable --now meshbay-node@$USER WorkingDirectory=%h -# Override unlock mode in ~/.config/meshbay/hub.env +# Secrets: MESHBAY_PASSWORD (hub login), MESHBAY_UNLOCK_KEY (keystore) EnvironmentFile=-%h/.config/meshbay/node.env -# Alternative: MESHBAY_UNLOCK_KEY=<password> in environment file (chmod 600) ExecStart=/usr/bin/meshbay-node --config %h/.config/meshbay/node.toml Restart=on-failure RestartSec=10 TimeoutStopSec=30 +# Data: chat DBs, indexes — default ~/.local/share/meshbay/ +StateDirectory=meshbay + # Security hardening NoNewPrivileges=true PrivateTmp=true +ProtectSystem=strict +ReadWritePaths=%h/.config/meshbay %h/.local/share/meshbay +# Groups' shared_dir paths must be added to ReadWritePaths if outside ~ [Install] WantedBy=default.target |