trustedrelays/trustedrelays.service at main · Letdown2491/trustedrelays · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
[Unit]
Description=Trusted Relay Assertions Provider
Documentation=https://github.com/Letdown2491/trustedrelays
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=trustedrelays
Group=trustedrelays
WorkingDirectory=/opt/trustedrelays

# Environment
Environment=NODE_ENV=production
EnvironmentFile=-/opt/trustedrelays/.env

# Run daemon
ExecStart=/usr/local/bin/bun run --smol src/index.ts daemon --config /opt/trustedrelays/config.json

# Restart on failure
Restart=on-failure
RestartSec=10

# Security hardening
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
ReadWritePaths=/opt/trustedrelays/data

# Memory limits (2GB VPS - leave ~500MB for OS)
MemoryHigh=1280M
MemoryMax=1536M

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=trustedrelays

[Install]
WantedBy=multi-user.target