Initial server source import

2026-09-30 20:30:56 +03:00
commit 170dd941b9
498 changed files with 261563 additions and 0 deletions
@@ -0,0 +1,18 @@
+[Unit]
+Description=Expire Truf Caddy admin-only denylist entries
+After=docker.service
+Requires=docker.service
+
+[Service]
+Type=oneshot
+User=root
+Group=root
+ExecStart=/usr/local/sbin/truf-caddy-admin-denylist expire
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/truf-edge /etc/truf-edge/denylist
+RestrictAddressFamilies=AF_UNIX
+LockPersonality=true
+MemoryDenyWriteExecute=true
@@ -0,0 +1,11 @@
+[Unit]
+Description=Expire Truf Caddy admin-only denylist entries every minute
+
+[Timer]
+OnBootSec=1min
+OnUnitActiveSec=1min
+Persistent=true
+AccuracySec=10s
+
+[Install]
+WantedBy=timers.target