portok 1.0.0

package/portok@.service

@@ -0,0 +1,62 @@
+# Portok systemd template unit for multi-instance deployments
+# Place this file at /etc/systemd/system/portok@.service
+#
+# Usage:
+#   systemctl start portok@api      # Start instance "api"
+#   systemctl enable portok@web     # Enable instance "web" at boot
+#   systemctl status portok@api     # Check status
+#   journalctl -u portok@api -f     # View logs
+#
+# Each instance reads its config from /etc/portok/%i.env
+
+[Unit]
+Description=Portok Zero-Downtime Proxy (%i)
+After=network.target
+Documentation=https://github.com/your-org/portok
+
+[Service]
+Type=simple
+User=www-data
+Group=www-data
+
+# Instance configuration from env file
+EnvironmentFile=/etc/portok/%i.env
+
+# Set instance name automatically from systemd specifier
+Environment=INSTANCE_NAME=%i
+
+# Working directory (for relative paths if needed)
+WorkingDirectory=/opt/portok
+
+# Start the daemon
+ExecStart=/usr/bin/node /opt/portok/portokd.mjs
+
+# Restart policy
+Restart=always
+RestartSec=5
+StartLimitBurst=5
+StartLimitIntervalSec=60
+
+# Logging
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=portok-%i
+
+# Security hardening
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=true
+PrivateTmp=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+
+# Allow writing to state directory
+ReadWritePaths=/var/lib/portok
+
+# Network access (required for proxying)
+RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX
+
+[Install]
+WantedBy=multi-user.target
+