mwiegand 8e678b6765 deploy/files: annotate reference units with per-directive hardening comments ... Update the educational reference copies of left4me-server@.service and left4me-web.service to match the new hardening composition from the ckn-bw reactor (HARDENING_COMMON + HARDENING_SERVER / HARDENING_WEB). Per-directive comments explain each defense's purpose and the threat it addresses, so a cold reader of this repo can understand the threat model from the unit file alone. Top-of-file note in each reference points at the ckn-bw reactor as the live source; reference is hand-synced. gunicorn ExecStart in the web reference uses placeholder '--workers 4 --threads 4' values; live emission interpolates from metadata. This is the documented divergence between the reference and the deployed unit. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>		2026-05-15 14:54:10 +02:00
..
l4d2-build.slice	docs(deploy): point slice files at perf baseline spec	2026-05-09 09:51:48 +02:00
l4d2-game.slice	docs(deploy): point slice files at perf baseline spec	2026-05-09 09:51:48 +02:00
left4me-server@.service	deploy/files: annotate reference units with per-directive hardening comments	2026-05-15 14:54:10 +02:00
left4me-web.service	deploy/files: annotate reference units with per-directive hardening comments	2026-05-15 14:54:10 +02:00
left4me-workshop-refresh.service	deploy: weaken refresh-timer dep on web.service from Requires to Wants	2026-05-11 23:22:42 +02:00
left4me-workshop-refresh.timer	deploy: schedule daily workshop refresh via systemd timer	2026-05-11 23:20:13 +02:00