shadowdaoandClaude Sonnet 5.5
d07030a10b
Linux packages: migrate /etc/boundary.d to /etc/threshold.d without clobbering, reuse the boundary service user, carry over service enablement with a boundary.service alias, provide a boundary command. Docker: accept /boundary/config.hcl, boundary command, /boundary symlink. CLI: deprecation notice when invoked as boundary (stderr only). Dev mode: also create *.threshold.dev aliases. Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
27 lines
815 B
Desktop File
27 lines
815 B
Desktop File
[Unit]
|
|
Description="Threshold (fork of HashiCorp Boundary CE) - Identity-based access management for dynamic infrastructure"
|
|
Documentation=https://repo.anhonesthost.net/CyberCoveLLC/threshold
|
|
StartLimitIntervalSec=60
|
|
StartLimitBurst=3
|
|
|
|
[Service]
|
|
# Legacy HashiCorp Boundary environment file (BOUNDARY_* variables are still
|
|
# honored). Read first so that threshold.env takes precedence.
|
|
EnvironmentFile=-/etc/boundary.d/boundary.env
|
|
EnvironmentFile=-/etc/threshold.d/threshold.env
|
|
User=threshold
|
|
Group=threshold
|
|
ProtectSystem=full
|
|
ProtectHome=read-only
|
|
ExecStart=/usr/bin/threshold server -config=/etc/threshold.d/threshold.hcl
|
|
ExecReload=/bin/kill --signal HUP $MAINPID
|
|
KillMode=process
|
|
KillSignal=SIGINT
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
TimeoutStopSec=30
|
|
LimitMEMLOCK=infinity
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|