Begin Hnefatafl from the game kit

2026-09-23 12:45:44 -04:00
commit ed1dcad259
59 changed files with 8048 additions and 0 deletions
@@ -0,0 +1,36 @@
+[Unit]
+Description=Hnefatafl game server
+After=network.target
+
+[Service]
+Type=simple
+User=hnefatafl
+WorkingDirectory=/opt/hnefatafl/app/server
+Environment=PORT=8789
+Environment=KEEPER=Kestrel
+Environment=KEEPER_TZ=America/New_York
+# Caddy terminates TLS; the plaintext port must not face the internet.
+Environment=HOST=127.0.0.1
+Environment=DATA_DIR=/var/lib/hnefatafl/rooms
+# Create the Sentry project (the Sentry MCP can) and paste its DSN here; empty means no error reporting.
+Environment=SENTRY_DSN=__SENTRY_DSN__
+ExecStart=/opt/hnefatafl/app/server/node_modules/.bin/tsx src/index.ts
+Restart=always
+RestartSec=3
+
+# Sandbox: the process reads /opt/hnefatafl and writes only its data dir.
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=strict
+ProtectHome=yes
+ReadWritePaths=/var/lib/hnefatafl
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+# A runaway process gets killed and restarted before it can take the box down.
+MemoryMax=300M
+LimitNOFILE=4096
+
+[Install]
+WantedBy=multi-user.target