rothmanandClaude Opus 5.5
a33c4822bf
Chromium kiosk without a desktop for the Raspberry Pi 3, a Flask web interface on port 8080 (kiosk, system and network management), a restricted root helper, network changes with automatic rollback, a healthcheck timer, install/update/uninstall scripts and a pi-gen image build. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
32 lines
969 B
Desktop File
32 lines
969 B
Desktop File
[Unit]
|
|
Description=VoxIP Kiosk Manager (webbeheer)
|
|
Documentation=file:///usr/share/doc/voxip-kiosk/README.md
|
|
After=network.target voxip-boot-import.service
|
|
StartLimitIntervalSec=300
|
|
StartLimitBurst=10
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=voxip
|
|
Group=voxip
|
|
# systemd-journal: read logs; video: vcgencmd (voltage/throttling)
|
|
SupplementaryGroups=systemd-journal video
|
|
ExecStart=/usr/lib/voxip-kiosk/voxip-kiosk-manager
|
|
Restart=always
|
|
RestartSec=3
|
|
UMask=0027
|
|
LogsDirectory=voxip-kiosk
|
|
LogsDirectoryMode=0750
|
|
SyslogIdentifier=voxip-kiosk-manager
|
|
# No NoNewPrivileges/ProtectSystem/ProtectHome: the helper started through
|
|
# "sudo -n voxip-kiosk-helper" inherits this unit's mount namespace and must
|
|
# be able to write /etc (hostname, NetworkManager profiles). The web process
|
|
# itself runs unprivileged as user voxip and can only write its own dirs.
|
|
ProtectKernelTunables=yes
|
|
ProtectKernelModules=yes
|
|
ProtectControlGroups=yes
|
|
LockPersonality=yes
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|