feat: bootstrap awg2 harness rust workspace and docs

2026-05-09 02:17:25 +05:00
commit d937f816bf
47 changed files with 4195 additions and 0 deletions
@@ -0,0 +1,22 @@
+[Unit]
+Description=Daily random reboot scheduler (01:00-02:00 UTC)
+
+[Service]
+Type=simple
+User=root
+ExecStart=/opt/reboot-scheduler/reboot-scheduler
+Restart=on-failure
+RestartSec=60
+StandardOutput=journal
+StandardError=journal
+
+# Базовое hardening
+CapabilityBoundingSet=CAP_SYS_BOOT
+AmbientCapabilities=CAP_SYS_BOOT
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target