jhkaktus 6c41779667 feat: systemd unit for deployment behind reverse proxy ...

Adds deploy/crushdb.service: plain HTTP on 127.0.0.1:5000 (HOST/PORT
env), auto-restart on failure, hardened with ProtectSystem/strict,
NoNewPrivileges, capability drop and restricted address families so
only the SQLite dir and private tmp are writable. Passes
systemd-analyze verify (the one reported warning is the expected
/path-in-this-repo venv path of the source checkout, not the deployed
one).

🤖 Generated with Codebuff
Co-Authored-By: Codebuff <noreply@codebuff.com>

2026-10-11 00:10:58 +02:00

..

crushdb.service

feat: systemd unit for deployment behind reverse proxy

2026-10-11 00:10:58 +02:00