diff options
Diffstat (limited to 'deploy')
| -rw-r--r-- | deploy/yamn-nym-ingress.env.example | 6 | ||||
| -rw-r--r-- | deploy/yamn-nym-ingress.service | 32 |
2 files changed, 38 insertions, 0 deletions
diff --git a/deploy/yamn-nym-ingress.env.example b/deploy/yamn-nym-ingress.env.example new file mode 100644 index 0000000..029c506 --- /dev/null +++ b/deploy/yamn-nym-ingress.env.example @@ -0,0 +1,6 @@ +YAMN_NYM_INGRESS_STORAGE=/var/lib/yamnweb/nym-ingress +YAMN_TOR_SOCKS=127.0.0.1:9050 +YAMN_INGRESS_FROM=<> +YAMN_DRY_RUN=false +# Replace this list with the current, reviewed YAMN entry addresses. +YAMN_ALLOWED_ENTRY_ADDRESSES=yamn@virebent.art,yamn@mixmin.net,yamn2@mixmin.net,yamn3@mixmin.net,yamn4@mixmin.net,yamn@gronk.ch,yamn@eocto.net,yamn@middleman.remailer.online,yamn@milton.redmv.net,yamn@yamn.paranoici.org,yamn@shalo.ca,yamn@tnetconsulting.net,yamn@yeahno.net diff --git a/deploy/yamn-nym-ingress.service b/deploy/yamn-nym-ingress.service new file mode 100644 index 0000000..8e51a03 --- /dev/null +++ b/deploy/yamn-nym-ingress.service @@ -0,0 +1,32 @@ +[Unit] +Description=YAMN Nym ingress +Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/ +Wants=network-online.target +After=network-online.target tor.service + +[Service] +Type=simple +User=yamn-ingress +Group=yamn-ingress +EnvironmentFile=/etc/yamnweb/yamn-nym-ingress.env +ExecStart=/usr/local/bin/yamn-nym-ingress +Restart=on-failure +RestartSec=10s +NoNewPrivileges=true +PrivateTmp=true +PrivateDevices=true +ProtectHome=true +ProtectSystem=strict +ReadWritePaths=/var/lib/yamnweb/nym-ingress +RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX +RestrictSUIDSGID=true +LockPersonality=true +MemoryDenyWriteExecute=true +CapabilityBoundingSet= +AmbientCapabilities= +StandardOutput=journal +StandardError=journal + +[Install] +WantedBy=multi-user.target + |