feat: control API with session ports and persistent bans

2026-09-28 12:29:20 +02:00
parent 7813e02186
commit 589df6190c
8 changed files with 995 additions and 210 deletions
@@ -9,6 +9,10 @@ Restart=always
 RestartSec=2
 # One socket per client session, at most 2048 (MAX_SESSIONS): room above it.
 LimitNOFILE=4096
+# ETRELAY_CONTROL_TOKEN=... for --control; read by systemd, root only (0600).
+EnvironmentFile=-/etc/etrelay/env
+# /var/lib/etrelay: the bans file, kept across restarts and upgrades.
+StateDirectory=etrelay

 # Port 27960 > 1024: no privilege needed.
 DynamicUser=yes