VoxIP Kiosk OS 1.0.0: Raspberry Pi kiosk with web management

Chromium kiosk without a desktop for the Raspberry Pi 3, a Flask web
interface on port 8080 (kiosk, system and network management), a
restricted root helper, network changes with automatic rollback, a
healthcheck timer, install/update/uninstall scripts and a pi-gen image
build.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

systemd/voxip-kiosk-manager.service

@@ -0,0 +1,31 @@
+[Unit]
+Description=VoxIP Kiosk Manager (webbeheer)
+Documentation=file:///usr/share/doc/voxip-kiosk/README.md
+After=network.target voxip-boot-import.service
+StartLimitIntervalSec=300
+StartLimitBurst=10
+
+[Service]
+Type=simple
+User=voxip
+Group=voxip
+# systemd-journal: read logs; video: vcgencmd (voltage/throttling)
+SupplementaryGroups=systemd-journal video
+ExecStart=/usr/lib/voxip-kiosk/voxip-kiosk-manager
+Restart=always
+RestartSec=3
+UMask=0027
+LogsDirectory=voxip-kiosk
+LogsDirectoryMode=0750
+SyslogIdentifier=voxip-kiosk-manager
+# No NoNewPrivileges/ProtectSystem/ProtectHome: the helper started through
+# "sudo -n voxip-kiosk-helper" inherits this unit's mount namespace and must
+# be able to write /etc (hostname, NetworkManager profiles). The web process
+# itself runs unprivileged as user voxip and can only write its own dirs.
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+LockPersonality=yes
+
+[Install]
+WantedBy=multi-user.target