Refactor systemd service files for SQLPage

- Update service descriptions and documentation references
- Adjust restart settings and security options for improved stability
- Streamline environment variable definitions and working directory paths

Author: lovasoa

debian/README.md

@@ -0,0 +1,51 @@
+# Debian Packaging for SQLPage
+
+This directory contains the source files for building Debian packages of SQLPage.
+
+## Files
+
+- `control` - Package metadata and dependencies
+- `changelog` - Version history for debian packaging
+- `copyright` - License and copyright information
+- `rules` - Build instructions
+- `install` - Files to install and their destinations
+- `postinst` - Post-installation script
+- `postrm` - Post-removal script
+- `sqlpage.service` - systemd service file for package installations
+
+## systemd Service Files
+
+There are **two** systemd service files in this repository:
+
+1. **`/sqlpage.service`** (repository root)
+   - For manual/source installations
+   - Uses `/usr/local/bin/sqlpage.bin`
+   - Includes `RUST_LOG` and `LISTEN_ON` environment variables
+   - Includes `AmbientCapabilities=CAP_NET_BIND_SERVICE` for port 80 binding
+
+2. **`/debian/sqlpage.service`** (this directory)
+   - For Debian/Ubuntu package installations
+   - Uses `/usr/bin/sqlpage` (FHS standard location)
+   - Includes `SQLPAGE_CONFIGURATION_DIRECTORY` and `SQLPAGE_WEB_ROOT` variables
+   - Does not bind to privileged ports by default
+
+Both files share the same security hardening settings but are customized for their respective installation methods.
+
+## Building
+
+To build the Debian package:
+
+```bash
+dpkg-buildpackage -us -uc
+```
+
+The built `.deb` file will be placed in the parent directory.
+
+## Testing
+
+After building, you can test the package installation:
+
+```bash
+sudo dpkg -i ../sqlpage_*.deb
+```
+

debian/sqlpage.service

@@ -9,12 +9,15 @@ User=sqlpage
 Group=sqlpage
 WorkingDirectory=/var/www/sqlpage
 ExecStart=/usr/bin/sqlpage
+
 Environment="SQLPAGE_CONFIGURATION_DIRECTORY=/etc/sqlpage"
 Environment="SQLPAGE_WEB_ROOT=/var/www/sqlpage"
+
 Restart=on-failure
-RestartSec=5s
+RestartSec=10s
+
+SyslogIdentifier=sqlpage
 
-# Security settings
 NoNewPrivileges=true
 PrivateTmp=true
 ProtectSystem=strict
@@ -23,6 +26,11 @@ ReadWritePaths=/var/www/sqlpage /var/log/sqlpage
 ProtectKernelTunables=true
 ProtectKernelModules=true
 ProtectControlGroups=true
+ProtectClock=true
+ProtectHostname=true
+ProtectProc=invisible
+
+LimitNOFILE=65536
 
 [Install]
 WantedBy=multi-user.target

sqlpage.service

@@ -1,50 +1,41 @@
-# This is a basic systemd service file for SQLPage
-# For more information about systemd service files, see https://www.freedesktop.org/software/systemd/man/latest/systemd.service.html
-# Put this file in /etc/systemd/system/sqlpage.service
+# SQLPage systemd service file for manual/source installations
+# For package installations, see debian/sqlpage.service
+# Install to: /etc/systemd/system/sqlpage.service
 
 [Unit]
-Description=SQLPage website
+Description=SQLPage Web Server
 Documentation=https://sql-page.com
 After=network.target
 
 [Service]
-# Define the user and group to run the service
+Type=simple
 User=sqlpage
 Group=sqlpage
-
-# Set the working directory and the executable path
 WorkingDirectory=/var/www/sqlpage
 ExecStart=/usr/local/bin/sqlpage.bin
 
-# Environment variables
 Environment="RUST_LOG=info"
 Environment="LISTEN_ON=0.0.0.0:80"
 
-# Allow binding to port 80
 AmbientCapabilities=CAP_NET_BIND_SERVICE
 
-# Restart options
 Restart=always
-RestartSec=10
+RestartSec=10s
 
-# Logging options
-#StandardOutput=syslog
-#StandardError=syslog
 SyslogIdentifier=sqlpage
 
-# Security options
 NoNewPrivileges=true
-ProtectSystem=full
 PrivateTmp=true
-ProtectControlGroups=true
-ProtectKernelModules=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/var/www/sqlpage /var/log/sqlpage
 ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
 ProtectClock=true
 ProtectHostname=true
 ProtectProc=invisible
-ProtectClock=true
 
-# Resource limits
 LimitNOFILE=65536
 
 [Install]