From e9fbbe3373eb66a345f5e3829e2563b94dc92051 Mon Sep 17 00:00:00 2001
From: Gab Virebent <gabriel1@virebent.art>
Date: Mon, 24 Aug 2026 17:34:45 +0200
Subject: Harden transport and preserve profile identities

---
 deploy/n2usenet-gateway-watch.service | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)
 create mode 100644 deploy/n2usenet-gateway-watch.service

(limited to 'deploy/n2usenet-gateway-watch.service')

diff --git a/deploy/n2usenet-gateway-watch.service b/deploy/n2usenet-gateway-watch.service
new file mode 100644
index 0000000..9854ae0
--- /dev/null
+++ b/deploy/n2usenet-gateway-watch.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=Renew and verify the N2Usenet Nym gateway registration
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/n2usenet-gateway-watch
+TimeoutStartSec=10min
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=strict
+RuntimeDirectory=n2usenet-gateway-watch
+RuntimeDirectoryMode=0750
+StateDirectory=n2usenet-gateway-watch
+StateDirectoryMode=0700
+ReadWritePaths=/var/lib/n2usenet/nym
-- 
cgit v1.2.3