jhkaktus 47b65508f4 feat: systemd unit for deployment behind reverse proxy (port 8085) ...

deploy/crushdb.service runs run.py on 127.0.0.1:8085 with auto-restart
and hardening (ProtectSystem=strict, ReadWritePaths only for the SQLite
dir, no capabilities, restricted address families). Verified with
systemd-analyze verify against locally substituted paths (exit 0); the
only remaining warning on the un-substituted unit is the expected
path-not-found for the deployment location in this dev checkout.

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>

2026-10-11 00:12:03 +02:00

..

crushdb.service

feat: systemd unit for deployment behind reverse proxy (port 8085)

2026-10-11 00:12:03 +02:00