FP

deploy/stream-control-server.service

@@ -0,0 +1,26 @@
+# Serveur de contrôle — /etc/systemd/system/stream-control-server.service
+# systemctl daemon-reload && systemctl enable --now stream-control-server
+
+[Unit]
+Description=Stream Control — serveur de contrôle
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=stream
+WorkingDirectory=/opt/stream-control
+Environment=NODE_ENV=production
+ExecStart=/usr/bin/node --disable-warning=ExperimentalWarning packages/server/dist/index.js
+Restart=always
+RestartSec=5
+
+# Durcissement
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/opt/stream-control/data
+
+[Install]
+WantedBy=multi-user.target