benvin
a3b51018a9
- Makefile: add make patch|minor|major (tag + push), dist-build, completions, and rpm/rpm-package targets. - packaging/nfpm.yaml + scripts/build-rpm.sh: package the tomswall binary with bash/zsh completions, the example config, and a systemd agent unit into an RPM. - packaging/tomswall-agent.service + agent.env: run `tomswall agent` as a systemd service (CAP_NET_ADMIN/CAP_NET_RAW), configured via /etc/tomswall/agent.env. - .woodpecker/release.yaml: on v* tag, test -> build -> package RPM -> PUT to the artifactapi rpm-internal repo. Matches node-lookup conventions.
19 lines
519 B
Desktop File
19 lines
519 B
Desktop File
[Unit]
|
|
Description=tomswall control-plane agent (pull and apply firewall config)
|
|
Documentation=https://git.unkin.net/unkin/tomswall
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
EnvironmentFile=/etc/tomswall/agent.env
|
|
ExecStart=/usr/sbin/tomswall agent
|
|
Restart=on-failure
|
|
RestartSec=10
|
|
# The agent programs nftables and needs the requisite capabilities.
|
|
AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW
|
|
CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_RAW
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|