Mirrors decnet-reuse-correlator.service.j2: same hardening posture (NoNewPrivileges, ProtectSystem=full, etc.), same restart policy, same log file convention. The decnet init renderer picks it up automatically via the decnet-*.service.j2 glob. Also reconciles a naming inconsistency I shipped earlier: the heartbeat name was 'intel' (the package) but the CLI command and unit are 'enrich' (the action). Renamed the heartbeat to 'enrich' so the workers panel displays the same string the operator types and the same string in the systemd unit file. Convention across the project: heartbeat name = registry key = unit basename = CLI command name. Registers 'enrich' in worker_registry.KNOWN_WORKERS and in the start-all preferred order. The decnet.target Wants= list also picks up the new unit so 'systemctl start decnet.target' brings everything up together.
23 lines
838 B
SYSTEMD
23 lines
838 B
SYSTEMD
[Unit]
|
|
Description=DECNET honeypot framework (all master-host workers)
|
|
Documentation=https://git.resacachile.cl/anti/DECNET/wiki/Workers
|
|
# Bring workers up in dependency order: bus first (everything else publishes
|
|
# heartbeats to it), then the API + data-plane workers. systemd resolves the
|
|
# actual ordering via each unit's own After=/Wants= on decnet-bus.service —
|
|
# this target is a convenience grouping, not an ordering primitive.
|
|
Wants=decnet-bus.service \
|
|
decnet-api.service \
|
|
decnet-web.service \
|
|
decnet-collector.service \
|
|
decnet-profiler.service \
|
|
decnet-sniffer.service \
|
|
decnet-prober.service \
|
|
decnet-mutator.service \
|
|
decnet-reuse-correlator.service \
|
|
decnet-enrich.service \
|
|
decnet-webhook.service
|
|
After=decnet-bus.service
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|