[HLCC-ICE-000001][ZY-CONTRIB-20260723-001] feat: 以来光者贡献链启用冰朔第五域个人子频道

server-tools/lake-lamp-authz/lake-lamp-action-broker.service

@@ -0,0 +1,25 @@
+[Unit]
+Description=Guanghu fixed-action broker for Lake Lamp authorization
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+EnvironmentFile=/etc/guanghu/secrets/lake-lamp/action-broker.env
+ExecStart=/usr/bin/node /opt/guanghu/lake-lamp-authz/action-broker.js
+Restart=on-failure
+RestartSec=3
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadOnlyPaths=/etc/guanghu/action-broker-ssh-config /etc/guanghu/secrets/lake-lamp
+RuntimeDirectory=guanghu
+RuntimeDirectoryMode=0755
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+LockPersonality=true
+
+[Install]
+WantedBy=multi-user.target