luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add HTTPS management console and response planning

Browse source
This commit is contained in:
Luna 2026-06-12 02:39:53 -07:00
parent a56d72edd6
commit a7129e5666
16 changed files with 927 additions and 160 deletions
Download patch file Download diff file Expand all files Collapse all files

5
systemd/enodia-sentinel-web.service
View file

@ -14,8 +14,9 @@ RestartSec=5
# lock it down hard. It does not need root, but reads root-owned snapshots, so
# it runs as root with an otherwise minimal surface and no capabilities.
ProtectSystem=strict
# Writable only so it can persist an auto-generated token; set web_token in the
# config to keep this purely read-only.
# Writable so it can persist an auto-generated token and self-signed TLS
# certificate/key. Set web_token, web_tls_cert, and web_tls_key in config to
# keep this service purely read-only after provisioning.
ReadWritePaths=/var/log/enodia-sentinel
ProtectHome=yes
NoNewPrivileges=yes