chore: initial import

2025-12-18 00:29:15 +01:00
commit 789397eb33
22 changed files with 5944 additions and 0 deletions
--- a/systemd/vaultmesh-node-agent.service
+++ b/systemd/vaultmesh-node-agent.service
@@ -0,0 +1,23 @@
+[Unit]
+Description=VaultMesh Node Agent
+After=network-online.target cloudflared.service
+Wants=network-online.target
+
+[Service]
+Type=exec
+ExecStart=/usr/local/bin/vaultmesh-node-agent
+Restart=on-failure
+RestartSec=10
+EnvironmentFile=/etc/vaultmesh/agent.env
+
+# Hardening
+NoNewPrivileges=yes
+ProtectSystem=strict
+ProtectHome=yes
+PrivateTmp=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+
+[Install]
+WantedBy=multi-user.target