dev_agentandClaude Opus 5.5
fd05d51ebf
The repository still carried operating steps from the deleted runbook: secret creation and permission commands in deploy/.env.example, build, restart and restore steps in deploy/compose.yaml, a direct "docker compose up -d" in mealquest-firewall.service, a manual run in mealquest-media-backup.service and a dev start command in compose.dev.yaml. Replace each with a pointer to the named section of CTXD project mealquest, RUNBOOKS.MD, keeping every variable, path, owner, mode, port and mount description. Maestro task e81ed994-a510-48e6-9cf6-e76d5d81f56c. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
24 lines
802 B
Desktop File
24 lines
802 B
Desktop File
# Applies the MealQuest DOCKER-USER rules (/usr/local/sbin/mealquest-firewall).
|
|
#
|
|
# PartOf= re-runs this unit whenever docker.service is stopped or restarted,
|
|
# and WantedBy=docker.service starts it whenever docker.service starts. Both
|
|
# are one-way: a failure here fails this unit visibly and never fails
|
|
# docker.service.
|
|
#
|
|
# mealquest.service requires this unit and starts the stack only after it
|
|
# has succeeded. Installing and operating both: CTXD project mealquest,
|
|
# RUNBOOKS.MD "Host firewall" and "Stack unit".
|
|
[Unit]
|
|
Description=Restrict MealQuest port 8090 to Traefik (DOCKER-USER)
|
|
After=docker.service
|
|
Requires=docker.service
|
|
PartOf=docker.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
RemainAfterExit=yes
|
|
ExecStart=/usr/local/sbin/mealquest-firewall
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target docker.service
|