Initial Systemd Service Run: 2/3

Signed-off-by: Georg <georg@lysergic.dev>

systemd/calico.service

@@ -0,0 +1,12 @@
+[Unit]
+Description=calico
+Wants=network.target
+
+[Service]
+User=pounce
+Group=pounce
+ExecStart=/usr/local/bin/calico -H irc.lsd.systems -P 6561 /var/run/calico
+RuntimeDirectory=calico
+
+[Install]
+WantedBy=multi-user.target

systemd/confluence.service

@@ -0,0 +1,19 @@
+[Unit]
+Description = Confluence Server
+After=syslog.target network.target
+
+[Service]
+Type=forking
+#Environment=CONFLUENCE_HOME=/opt/atlassian/homes/confluence
+Environment=JAVA_HOME=/opt/jdk
+PermissionsStartOnly=true
+User=confluence
+Group=atlassian
+ExecStart=/opt/confluence/bin/startup.sh
+ExecStop=/opt/confluence/bin/shutdown.sh
+TimeoutStartSec=120
+TimeoutStopSec=600
+PrivateTmp=true
+
+[Install]
+WantedBy = multi-user.target

systemd/dyndns-pdns.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Dynamic DNS Collector
+After=network.target
+
+[Service]
+Type=simple
+User=dyndns
+Group=dyndns
+WorkingDirectory=/opt/dyndns/
+ExecStart=/opt/dyndns/go/bin/dyndns-pdns -config=/opt/dyndns/config.yml
+RestartSec=15
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

systemd/etherpad.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=etherpad-lite
+After=syslog.target network.target
+
+[Service]
+Type=simple
+User=etherpad
+Group=etherpad
+WorkingDirectory=/opt/etherpad
+Environment=NODE_ENV=production
+Environment=PATH=/opt/etherpad/.nvm/versions/node/v16.4.0/bin:/usr/local/bin:/usr/bin:/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin
+ExecStart=/opt/etherpad/.nvm/versions/node/v16.4.0/bin/node /opt/etherpad/etherpad-lite/src/node/server.js
+Restart=always
+
+[Install]
+WantedBy=multi-user.target

systemd/gitea.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=Gitea (Git with a cup of tea)
+After=syslog.target
+After=network.target
+Wants=mysqld.service
+After=mysqld.service
+
+[Service]
+RestartSec=2s
+Type=simple
+User=git
+Group=git
+WorkingDirectory=/var/lib/gitea/
+
+ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini
+Restart=always
+Environment=USER=git HOME=/var/lib/git GITEA_WORK_DIR=/var/lib/gitea
+
+[Install]
+WantedBy=multi-user.target
+

systemd/kfcgi.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=kfcgi server for scooper
+After=litterbox@.service var-lib-pounce-.local-dev.mount var-lib-pounce-.local-usr.mount var-lib-pounce-.local-lib.mount var-lib-pounce-.local-lib64.mount
+Requires=litterbox@.service var-lib-pounce-.local-dev.mount var-lib-pounce-.local-usr.mount var-lib-pounce-.local-lib.mount var-lib-pounce-.local-lib64.mount
+Wants=network.target
+
+
+[Service]
+User=root
+Group=pounce
+ExecStart=/usr/local/sbin/kfcgi -d -n 8 -l 16 -u nginx -s /var/run/kfcgi/scooper.sock -U pounce -p /var/lib/pounce/.local -- /bin/scooper /share/litterbox/litterbox.sqlite
+
+[Install]
+WantedBy=multi-user.target

systemd/litterbox@.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=litterbox for %i
+After=pounce@%i.service
+Requires=pounce@%i.service
+Wants=network.target
+
+[Service]
+User=pounce
+Group=pounce
+ExecStart=/usr/local/bin/litterbox /var/lib/pounce/.config/litterbox/%i
+Restart=always
+RestartSec=15
+SyslogIdentifier=litterbox-%i
+
+[Install]
+WantedBy=multi-user.target

systemd/pounce@.service

@@ -0,0 +1,14 @@
+[Unit]
+Description=pounce for %i
+Wants=network.target
+
+[Service]
+User=pounce
+Group=pounce
+ExecStart=/usr/local/bin/pounce /var/lib/pounce/.config/pounce/%i
+Restart=always
+RestartSec=15
+SyslogIdentifier=pounce-%i
+
+[Install]
+WantedBy=multi-user.target

systemd/shodan.service

@@ -0,0 +1,19 @@
+[Unit]
+Description=Limnoria (shodan)
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/opt/limnoria/shodan/venv/bin/supybot /opt/limnoria/shodan/shodan.conf
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=always
+User=shodan
+Group=shodan
+SyslogIdentifier=shodan
+SystemCallFilter=~@raw-io @clock @cpu-emulation @debug @keyring @module @mount @obsolete @privileged @raw-io
+ProtectSystem=strict
+ProtectHome=read-only
+ReadWritePaths=/opt/limnoria/shodan
+
+[Install]
+WantedBy=multi-user.target

systemd/xen-orchestra.service

@@ -0,0 +1,16 @@
+[Unit]
+Description=Xen-Orchestra
+After=redis@xen-orchestra.service
+Wants=network.target redis@xen-orchestra.service
+
+[Service]
+User=xo
+Group=xo
+ENVIRONMENT=NODE_ENV=PRODUCTION
+ExecStart=/opt/xen-orchestra/start.sh
+Restart=always
+RestartSec=15
+SyslogIdentifier=orchestra
+
+[Install]
+WantedBy=multi-user.target