feat: establish standalone Device Core repository

2026-08-21 11:51:21 +03:00
commit e0bac205d0
244 changed files with 51962 additions and 0 deletions
@@ -0,0 +1,48 @@
+[Unit]
+Description=NODE.DC B2 VPS bounded raw TCP relay
+After=network-online.target nodedc-b2-backhaul.service
+Wants=network-online.target
+Requires=nodedc-b2-backhaul.service
+
+[Service]
+Type=simple
+User=nodedc-relay
+Group=nodedc-relay
+WorkingDirectory=/opt/nodedc-b2-vps
+Environment=DEVICE_EDGE_RELAY_HEALTH_HOST=127.0.0.1
+Environment=DEVICE_EDGE_RELAY_HEALTH_PORT=18221
+Environment=DEVICE_EDGE_RELAY_INGRESS_ENABLED=true
+Environment=DEVICE_EDGE_RELAY_TCP_HOST=0.0.0.0
+Environment=DEVICE_EDGE_RELAY_TCP_PORT=9921
+Environment=DEVICE_EDGE_RELAY_UPSTREAM_HOST=127.0.0.1
+Environment=DEVICE_EDGE_RELAY_UPSTREAM_PORT=19921
+Environment=DEVICE_EDGE_RELAY_MAX_SESSIONS=128
+Environment=DEVICE_EDGE_RELAY_MAX_SESSIONS_PER_ADDRESS=16
+Environment=DEVICE_EDGE_RELAY_MAX_CONNECTIONS_PER_MINUTE_PER_ADDRESS=60
+Environment=DEVICE_EDGE_RELAY_MAX_TRACKED_SOURCE_ADDRESSES=4096
+Environment=DEVICE_EDGE_RELAY_MAX_BYTES_PER_DIRECTION=67108864
+Environment=DEVICE_EDGE_RELAY_SESSION_TIMEOUT_MS=300000
+Environment=DEVICE_EDGE_RELAY_SOURCE_POLICY=public-ipv4-only
+ExecStart=/opt/nodedc-b2-vps/runtime/node/bin/node /opt/nodedc-b2-vps/services/device-edge-relay/src/server.mjs
+Restart=always
+RestartSec=3s
+NoNewPrivileges=yes
+PrivateTmp=yes
+PrivateDevices=yes
+ProtectSystem=strict
+ProtectHome=yes
+ProtectKernelTunables=yes
+ProtectKernelModules=yes
+ProtectControlGroups=yes
+RestrictSUIDSGID=yes
+LockPersonality=yes
+MemoryDenyWriteExecute=no
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+SystemCallArchitectures=native
+MemoryMax=192M
+TasksMax=64
+LimitNOFILE=4096
+UMask=0077
+
+[Install]
+WantedBy=multi-user.target