funman300
800dfb50ce
- pkg/solitaire-quest/PKGBUILD: builds solitaire_app binary, depends on alsa-lib, libxkbcommon, systemd-libs (Bevy Linux requirements); check() runs only non-Bevy crates (solitaire_core, solitaire_sync) since Bevy integration tests require a GPU/display unavailable in chroot - pkg/solitaire-quest-server/PKGBUILD: builds solitaire_server binary, installs systemd service unit and hardened environment file template - pkg/solitaire-quest-server/solitaire-quest-server.service: systemd unit with ProtectSystem=strict, NoNewPrivileges, dedicated service user - pkg/solitaire-quest-server/server.env: documented env template installed to /etc/solitaire-quest-server/server.env (mode 0640, listed in backup=) - LICENSE: add MIT license - Cargo.toml: add license = "MIT" to [workspace.package] - All member crates: add license.workspace = true Both PKGBUILDs follow the Arch Rust package guidelines: prepare() uses --locked + cargo fetch build() uses --frozen --release -p <crate> RUSTUP_TOOLCHAIN=stable and CARGO_TARGET_DIR=target set in each stage Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
24 lines
526 B
Desktop File
24 lines
526 B
Desktop File
[Unit]
|
|
Description=Solitaire Quest Sync Server
|
|
Documentation=https://github.com/funman300/solitaire-quest/blob/main/README_SERVER.md
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=solitaire-quest
|
|
Group=solitaire-quest
|
|
EnvironmentFile=/etc/solitaire-quest-server/server.env
|
|
ExecStart=/usr/bin/solitaire_server
|
|
Restart=on-failure
|
|
RestartSec=5s
|
|
|
|
# Harden the service
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectSystem=strict
|
|
ProtectHome=true
|
|
ReadWritePaths=/var/lib/solitaire-quest-server
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|