Files
nexarch/deploy/systemd/nexarch-secheaders-devserver.service.tmpl
patrickandClaude Sonnet 5 072d164fe2
CI / Web-Barrierefreiheitspruefung (axe, Tastatur, Reflow, Textabstaende) (push) Canceled after 0s
CI / Core-Modul (Build/Vet/Test) (push) Canceled after 0s
CI / DMS Security-Test-Gate (AC5, Merge-Gate) (push) Canceled after 0s
CI / DMS-Modul (Lint/Build/Test/Coverage/Artefakt) (push) Canceled after 0s
CI / DMS-Modul Supply-Chain-Scan (govulncheck) (push) Canceled after 0s
CI / Web (dms-browser) (push) Canceled after 0s
CI / Web (pdf-viewer) (push) Canceled after 0s
CI / Web (shl) (push) Canceled after 0s
OPS-08: Sandbox-Direktiven fuer reine Netzwerkdienste (18 von 40 Vorlagen), Pruefskript check-systemd-hardening.sh
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-09-22 11:13:39 +02:00

24 lines
582 B
Cheetah

[Unit]
Description=NEXARCH secheaders-devserver
After=network.target postgresql.service nexarch-core.service
Wants=postgresql.service
[Service]
Type=simple
User=nexarch
Group=nexarch
EnvironmentFile=/etc/nexarch/core.env
ExecStart=__INSTALL_DIR__/bin/secheaders-devserver
Restart=on-failure
RestartSec=3
WorkingDirectory=__INSTALL_DIR__
# QA-15 F-13/OPS-08: reiner Netzwerkdienst (HTTP + Postgres-DSN aus
# EnvironmentFile), keine eigene Schreibarbeit im Dateisystem.
NoNewPrivileges=true
ProtectSystem=strict
ProtectHome=true
PrivateTmp=true
[Install]
WantedBy=multi-user.target