AkurAI-VPN / systemd/akurai-control.service

Latest change 6a442c68ad0ae8cefff4f913b19ce6df075ab9df - release: v0.0.6 by Claude Code

[Unit]
Description=AkurAI VPN control plane (vpn.olibuijr.com)
Documentation=https://github.com/olibuijr/AkurAI-VPN
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
ExecStart=/usr/local/bin/akurai-control serve
Restart=on-failure
RestartSec=2

# State and config (see docs/deployment-vpn.olibuijr.com.md)
StateDirectory=akurai-vpn
ConfigurationDirectory=akurai-vpn
Environment=AKURAI_VPN_STATE=/var/lib/akurai-vpn
Environment=AKURAI_VPN_CONFIG=/etc/akurai-vpn

# OIDC — provision /etc/akurai-vpn/oidc.env from akurai-passvault.
# Required keys: OIDC_CLIENT_ID, OIDC_CLIENT_SECRET, OIDC_REDIRECT_URI,
# and OIDC_ISSUER_URL.
EnvironmentFile=/etc/akurai-vpn/oidc.env

# Hardening (the control plane needs no special privileges)
DynamicUser=yes
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target