From 994071243fc80990cf09e820b671006e9bd31c76 Mon Sep 17 00:00:00 2001
From: Gab <24553253+gabrix73@users.noreply.github.com>
Date: Thu, 13 Aug 2026 14:04:30 +0200
Subject: Separate active YAMN code from Katzenpost PoC

---
 deploy/yamn-nym-ingress.service | 32 ++++++++++++++++++++++++++++++++
 1 file changed, 32 insertions(+)
 create mode 100644 deploy/yamn-nym-ingress.service

(limited to 'deploy/yamn-nym-ingress.service')

diff --git a/deploy/yamn-nym-ingress.service b/deploy/yamn-nym-ingress.service
new file mode 100644
index 0000000..8e51a03
--- /dev/null
+++ b/deploy/yamn-nym-ingress.service
@@ -0,0 +1,32 @@
+[Unit]
+Description=YAMN Nym ingress
+Documentation=https://docs.rs/nym-sdk/latest/nym_sdk/
+Wants=network-online.target
+After=network-online.target tor.service
+
+[Service]
+Type=simple
+User=yamn-ingress
+Group=yamn-ingress
+EnvironmentFile=/etc/yamnweb/yamn-nym-ingress.env
+ExecStart=/usr/local/bin/yamn-nym-ingress
+Restart=on-failure
+RestartSec=10s
+NoNewPrivileges=true
+PrivateTmp=true
+PrivateDevices=true
+ProtectHome=true
+ProtectSystem=strict
+ReadWritePaths=/var/lib/yamnweb/nym-ingress
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+RestrictSUIDSGID=true
+LockPersonality=true
+MemoryDenyWriteExecute=true
+CapabilityBoundingSet=
+AmbientCapabilities=
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+
-- 
cgit v1.2.3