ctucx.git: ansible-configs

My personal ansible roles and playbooks [deprecated in favor of nixos]

1 
2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 
26 #
# !!! This file is managed by Ansible !!!
#

[Unit]
Description=Rest Server
After=syslog.target
After=network.target

[Service]
Type=simple
User={{ services.rest_server.user }}
Group={{ services.rest_server.user }}
ExecStart=/usr/bin/rest-server --append-only --listen 127.0.0.1:{{ services.rest_server.port }} --no-auth --path /var/lib/rest-server --prometheus
Restart=always
RestartSec=5

# Optional security enhancements
NoNewPrivileges=yes
PrivateTmp=yes
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/var/lib/rest-server

[Install]
WantedBy=multi-user.target