AkurAI-VPN / systemd/akurai-control.service

Latest change b45c747b576578c85c8a08659b19c42cdb3dd30d - fix: standardize health endpoint to /api/health with app field by Claude Code

[Unit]
Description=AkurAI VPN control plane (vpn.olibuijr.com)
Documentation=https://github.com/olibuijr/AkurAI-VPN
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
ExecStart=/usr/local/bin/akurai-control serve
Restart=on-failure
RestartSec=2

# State and config (see docs/deployment-vpn.olibuijr.com.md)
StateDirectory=akurai-vpn
ConfigurationDirectory=akurai-vpn
Environment=AKURAI_VPN_STATE=/var/lib/akurai-vpn
Environment=AKURAI_VPN_CONFIG=/etc/akurai-vpn

# OIDC — see passvault entry "AkurAI-VPN OIDC client"
Environment=OIDC_CLIENT_ID=ed2c64e6db2797da007adddf80a13d04
Environment=OIDC_CLIENT_SECRET=abc9e4e4f0d4c071c1c5d2cb3708b31b19026801a11f77fec49a2301e6dd0a6965e8e96e4b0c35cb
Environment=OIDC_REDIRECT_URI=https://vpn.olibuijr.com/auth/callback
Environment=OIDC_ISSUER_URL=https://auth.olibuijr.com

# Hardening (the control plane needs no special privileges)
DynamicUser=yes
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=yes
PrivateTmp=yes

[Install]
WantedBy=multi-user.target