a39406c12b
Add production deployment configs for the collab relay and locator: region-split compose (CN/global), direct nginx gateways and location maps, the CN docker-user firewall install/verify/validate tooling and systemd unit, and an SoftHSM-backed locator variant. Extend the collab security/deployment boundary checks to cover the new artifacts. The CN application host address is a placeholder (10.0.0.10); substitute the real private address at deploy time.
3 lines
119 B
Plaintext
3 lines
119 B
Plaintext
# systemd-tmpfiles rule for the volatile shared Unix-socket directory.
|
|
d /run/openpencil/locator-hsm 0770 root 65532 -
|