v0.4.13 – Security-Analyse, DSGVO-Roadmap, Projekt-Kontext (CLOWNFISCHSERVER.md)

2026-04-19 22:25:59 +02:00
commit 5a2276021f
20 changed files with 3813 additions and 0 deletions
@@ -0,0 +1,18 @@
+[Unit]
+Description=🐠 Clownfischserver Boot Notification
+Documentation=https://github.com/mehlzoerwer-claude/clownfischserver
+After=network-online.target clownfisch.service ollama.service
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/sleep 120
+ExecStart=/opt/clownfischserver/venv/bin/python3 /opt/clownfischserver/bot/boot_notify.py
+EnvironmentFile=/opt/clownfischserver/config/.env
+WorkingDirectory=/opt/clownfischserver
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=clownfisch-boot
+
+[Install]
+WantedBy=multi-user.target
@@ -0,0 +1,26 @@
+[Unit]
+Description=🐠 Clownfischserver Telegram Bot
+Documentation=https://github.com/mehlzoerwer-claude/clownfischserver
+After=network-online.target ollama.service
+Wants=network-online.target ollama.service
+
+[Service]
+Type=simple
+User=clownfish
+Group=clownfish
+WorkingDirectory=/opt/clownfischserver
+EnvironmentFile=/opt/clownfischserver/config/.env
+ExecStart=/opt/clownfischserver/venv/bin/python3 /opt/clownfischserver/bot/bot.py
+Restart=always
+RestartSec=10
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=clownfisch
+
+# Security – allow sudo and iptables for SSH management
+AmbientCapabilities=CAP_NET_ADMIN CAP_SYS_ADMIN
+SecureBits=keep-caps
+PrivateTmp=yes
+
+[Install]
+WantedBy=multi-user.target