Add systemd service and socket unit files (#70)

Author: No767

deploy/kanae.service

@@ -0,0 +1,21 @@
+[Unit]
+Description=kanae
+Requires=kanae.socket
+After=network.target
+
+[Service]
+Type=notify
+NotifyAccess=main
+User=kanae
+Group=kanae
+DynamicUser=true
+WorkingDirectory=/home/noelle/apps/kanae
+ExecStart=/home/noelle/apps/kanae/deploy/launcher.sh
+ExecReload=/bin/kill -s HUP $MAINPID
+KillMode=mixed
+TimeoutStopSec=5
+PrivateTmp=true
+ProtectSystem=strict
+
+[Install]
+WantedBy=multi-user.target

deploy/kanae.socket

@@ -0,0 +1,15 @@
+[Unit]
+Description=kanae socket
+
+[Socket]
+ListenStream=/run/kanae.sock
+# Our service won't need permissions for the socket, since it
+# inherits the file descriptor by socket activation.
+# Only the nginx daemon will need access to the socket:
+SocketUser=haproxy
+SocketGroup=haproxy
+# Once the user/group is correct, restrict the permissions:
+SocketMode=0660
+
+[Install]
+WantedBy=sockets.target