admin
1707c928a9
gates / gates (push) Successful in 5m4s
Part A plan + readings, Part E read-backs (R-861 a, R-518) in audits/dooplex-survival-2026-10-09/. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
21 lines
760 B
Desktop File
21 lines
760 B
Desktop File
# Versioned in felhom.eu/scripts/dooplex-offsite/ (R-232); installed by install.sh. Plan: audits/dooplex-survival-2026-10-09/PLAN.md.
|
|
[Unit]
|
|
Description=Felhom: push Gitea + DooPlex secrets to ep0, encrypted (R-232)
|
|
Wants=network-online.target felhom-ep0-pbs-tunnel.service
|
|
After=network-online.target felhom-ep0-pbs-tunnel.service
|
|
OnFailure=felhom-backup-failmail@%n.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
ExecStart=/usr/local/sbin/felhom-dooplex-offsite
|
|
Environment=HOME=/var/lib/felhom-dooplex-offsite KUBECONFIG=/etc/rancher/k3s/k3s.yaml
|
|
UMask=0077
|
|
TimeoutStartSec=90min
|
|
Nice=10
|
|
IOSchedulingClass=idle
|
|
PrivateTmp=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
ReadWritePaths=/var/lib/felhom-dooplex-offsite /var/lib/node_exporter/textfile_collector
|
|
NoNewPrivileges=yes
|