wangjia
9b56e2667b
deploy.sh 在 systemd 安装段新增 cloudflared 二进制(apt 源)+ unit 安装; enable-on-boot 用 /etc/pangolin/cloudflared.env(TUNNEL_TOKEN)存在与否作 门槛,避免全新单机部署在 token 未落地前因 cloudflared 起不来而失败。 Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_013nMthbVEmQquxBRKb9Fj8u
20 lines
694 B
Desktop File
20 lines
694 B
Desktop File
[Unit]
|
|
Description=Pangolin cloudflared (control-plane API tunnel → 127.0.0.1:8080)
|
|
Documentation=https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/
|
|
After=network-online.target pangolin-server.service
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=notify
|
|
# TUNNEL_TOKEN 从此文件注入(不入 unit 本体、不进 ps);cloudflared 自动读取 env TUNNEL_TOKEN。
|
|
EnvironmentFile=/etc/pangolin/cloudflared.env
|
|
ExecStart=/usr/local/bin/cloudflared --no-autoupdate tunnel run
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
# 出站隧道,无需 root:用非特权用户即可(与 pangolin-server 同用户)。
|
|
User=pangolin
|
|
NoNewPrivileges=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|