VoxIP Kiosk OS 1.0.0: Raspberry Pi kiosk with web management

Chromium kiosk without a desktop for the Raspberry Pi 3, a Flask web
interface on port 8080 (kiosk, system and network management), a
restricted root helper, network changes with automatic rollback, a
healthcheck timer, install/update/uninstall scripts and a pi-gen image
build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

systemd/voxip-kiosk-browser.service

@@ -0,0 +1,36 @@
+[Unit]
+Description=VoxIP Kiosk Chromium
+Documentation=file:///usr/share/doc/voxip-kiosk/README.md
+Requires=voxip-kiosk-x.service
+After=voxip-kiosk-x.service voxip-boot-import.service
+# Restarting or stopping X restarts/stops the browser as well.
+PartOf=voxip-kiosk-x.service
+# A crash loop stops after 6 starts in 10 minutes; the healthcheck logs it
+# and retries after a cool-down (see voxip-kiosk-healthcheck).
+StartLimitIntervalSec=600
+StartLimitBurst=6
+
+[Service]
+Type=simple
+User=kiosk
+Group=kiosk
+Environment=DISPLAY=:0
+Environment=XAUTHORITY=/run/voxip-kiosk-x/Xauthority
+Environment=HOME=/home/kiosk
+RuntimeDirectory=voxip-kiosk-browser
+RuntimeDirectoryMode=0755
+StateDirectory=voxip-kiosk-browser
+StateDirectoryMode=0700
+ExecStart=/usr/lib/voxip-kiosk/voxip-kiosk-browser
+# voxip-kiosk-browser exits 1 after a crash when browser_restart is on, 0 when it is off.
+Restart=on-failure
+RestartSec=5
+TimeoutStopSec=15
+KillMode=control-group
+OOMScoreAdjust=-100
+LogRateLimitIntervalSec=30s
+LogRateLimitBurst=300
+SyslogIdentifier=voxip-kiosk-browser
+
+[Install]
+WantedBy=multi-user.target