diff options
Diffstat (limited to 'deploy')
| -rw-r--r-- | deploy/yamn-nym-ingress.env.example | 2 | ||||
| -rw-r--r-- | deploy/yamn-nym-sender.env.example | 4 | ||||
| -rw-r--r-- | deploy/yamn-nym-sender.service | 35 |
3 files changed, 40 insertions, 1 deletions
diff --git a/deploy/yamn-nym-ingress.env.example b/deploy/yamn-nym-ingress.env.example index 029c506..a5a0fbd 100644 --- a/deploy/yamn-nym-ingress.env.example +++ b/deploy/yamn-nym-ingress.env.example @@ -3,4 +3,4 @@ YAMN_TOR_SOCKS=127.0.0.1:9050 YAMN_INGRESS_FROM=<> YAMN_DRY_RUN=false # Replace this list with the current, reviewed YAMN entry addresses. -YAMN_ALLOWED_ENTRY_ADDRESSES=yamn@virebent.art,yamn@mixmin.net,yamn2@mixmin.net,yamn3@mixmin.net,yamn4@mixmin.net,yamn@gronk.ch,yamn@eocto.net,yamn@middleman.remailer.online,yamn@milton.redmv.net,yamn@yamn.paranoici.org,yamn@shalo.ca,yamn@tnetconsulting.net,yamn@yeahno.net +YAMN_ALLOWED_ENTRY_ADDRESSES=nyam@remailer.frell.eu.org,yamn@yamn.paranoici.org,yamn@virebent.art,yamn@mixmin.net,yamn2@mixmin.net,yamn3@mixmin.net,yamn4@mixmin.net diff --git a/deploy/yamn-nym-sender.env.example b/deploy/yamn-nym-sender.env.example new file mode 100644 index 0000000..f241c6b --- /dev/null +++ b/deploy/yamn-nym-sender.env.example @@ -0,0 +1,4 @@ +YAMN_NYM_RECIPIENT=<nym-ingress-recipient> +YAMN_NYM_STORAGE=/var/lib/yamnweb/nym-client +YAMN_NYM_SOCKET=/run/yamnweb/nym-sender.sock +YAMN_NYM_QUEUE_CAPACITY=8 diff --git a/deploy/yamn-nym-sender.service b/deploy/yamn-nym-sender.service new file mode 100644 index 0000000..bd7120e --- /dev/null +++ b/deploy/yamn-nym-sender.service @@ -0,0 +1,35 @@ +[Unit] +Description=YAMN persistent Nym sender +Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/ +Wants=network-online.target +After=network-online.target + +[Service] +Type=simple +User=www-data +Group=www-data +EnvironmentFile=/etc/yamnweb/yamnweb.env +ExecStart=/usr/local/bin/yamn-nym-submit --daemon +Restart=on-failure +RestartSec=10s +TimeoutStopSec=250s +RuntimeDirectory=yamnweb +RuntimeDirectoryMode=0700 +UMask=0077 +NoNewPrivileges=true +PrivateTmp=true +PrivateDevices=true +ProtectHome=true +ProtectSystem=strict +ReadWritePaths=/var/lib/yamnweb/nym-client /run/yamnweb +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictSUIDSGID=true +LockPersonality=true +MemoryDenyWriteExecute=true +CapabilityBoundingSet= +AmbientCapabilities= +StandardOutput=null +StandardError=journal + +[Install] +WantedBy=multi-user.target |