aboutsummaryrefslogtreecommitdiff
path: root/straper/db/public/services
diff options
context:
space:
mode:
authorLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-03-20 19:16:32 +0100
committerLukasz Kasprzak <lukasz.kasprzak@pm.me>2026-03-20 19:16:32 +0100
commit39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2 (patch)
tree9221704f413398cfb5d5759083b1e7032566820e /straper/db/public/services
parent6b59b75c3a294060dea66bdee16ffaf95ae92889 (diff)
downloadbin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.tar.gz
bin-39711cf6c2ec5a3b4480dcb4800cc3802bda5bf2.zip
feat: first fully successful run e2e on straper
Diffstat (limited to 'straper/db/public/services')
-rw-r--r--straper/db/public/services/custom-units/agate.service15
-rw-r--r--straper/db/public/services/custom-units/battery-limit.service10
-rw-r--r--straper/db/public/services/custom-units/dbus-fi.w1.wpa_supplicant1.service19
-rw-r--r--straper/db/public/services/custom-units/dbus-org.freedesktop.network1.service69
-rw-r--r--straper/db/public/services/custom-units/dbus-org.freedesktop.resolve1.service59
-rw-r--r--straper/db/public/services/custom-units/dbus-org.freedesktop.timesync1.service60
-rw-r--r--straper/db/public/services/custom-units/dnsmasq.service18
-rw-r--r--straper/db/public/services/custom-units/docker.service.d/override.conf3
-rw-r--r--straper/db/public/services/custom-units/loki.service16
-rw-r--r--straper/db/public/services/custom-units/lufi.service19
-rw-r--r--straper/db/public/services/custom-units/nftables.service.d/override.conf2
-rw-r--r--straper/db/public/services/custom-units/paperless.service28
-rw-r--r--straper/db/public/services/custom-units/promtail.service16
-rw-r--r--straper/db/public/services/custom-units/smartd.service17
-rw-r--r--straper/db/public/services/custom-units/speedtest-exporter.service13
-rw-r--r--straper/db/public/services/custom-units/sshd.service22
-rw-r--r--straper/db/public/services/custom-units/zed.service13
-rw-r--r--straper/db/public/services/custom-units/zfs-import-scan.service.d/override.conf3
-rw-r--r--straper/db/public/services/journald.conf52
-rw-r--r--straper/db/public/services/logind.conf59
-rw-r--r--straper/db/public/services/system.conf84
-rw-r--r--straper/db/public/services/timers.txt17
-rw-r--r--straper/db/public/services/timesyncd.conf26
-rw-r--r--straper/db/public/services/unit-files-all.txt437
-rw-r--r--straper/db/public/services/units-enabled.txt82
-rw-r--r--straper/db/public/services/units-failed.txt3
-rw-r--r--straper/db/public/services/units-running.txt49
27 files changed, 1211 insertions, 0 deletions
diff --git a/straper/db/public/services/custom-units/agate.service b/straper/db/public/services/custom-units/agate.service
new file mode 100644
index 0000000..a8858b7
--- /dev/null
+++ b/straper/db/public/services/custom-units/agate.service
@@ -0,0 +1,15 @@
+[Unit]
+Description=Agate Gemini Server
+After=network.target
+
+[Service]
+User=lukasz
+WorkingDirectory=/srv/gemini-capsule
+ExecStart=/home/lukasz/apps/agate/agate \
+ --content /srv/gemini-capsule \
+ --hostname gmi.labunix.xyz \
+ --addr 0.0.0.0:1965
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/battery-limit.service b/straper/db/public/services/custom-units/battery-limit.service
new file mode 100644
index 0000000..be72fd7
--- /dev/null
+++ b/straper/db/public/services/custom-units/battery-limit.service
@@ -0,0 +1,10 @@
+[Unit]
+Description=Battery Charge Limit
+After=multi-user.target
+
+[Service]
+Type=oneshot
+ExecStart=/bin/sh -c 'echo 55 > /sys/class/power_supply/BAT0/charge_control_end_threshold'
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/dbus-fi.w1.wpa_supplicant1.service b/straper/db/public/services/custom-units/dbus-fi.w1.wpa_supplicant1.service
new file mode 100644
index 0000000..5f26b21
--- /dev/null
+++ b/straper/db/public/services/custom-units/dbus-fi.w1.wpa_supplicant1.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=WPA supplicant
+Before=network.target
+After=dbus.service
+Wants=network.target
+IgnoreOnIsolate=true
+
+[Service]
+Type=dbus
+BusName=fi.w1.wpa_supplicant1
+ExecStart=/usr/sbin/wpa_supplicant -u -s -O "DIR=/run/wpa_supplicant GROUP=netdev"
+ExecReload=/bin/kill -HUP $MAINPID
+Group=netdev
+RuntimeDirectory=wpa_supplicant
+RuntimeDirectoryMode=0750
+
+[Install]
+WantedBy=multi-user.target
+Alias=dbus-fi.w1.wpa_supplicant1.service
diff --git a/straper/db/public/services/custom-units/dbus-org.freedesktop.network1.service b/straper/db/public/services/custom-units/dbus-org.freedesktop.network1.service
new file mode 100644
index 0000000..51d5f51
--- /dev/null
+++ b/straper/db/public/services/custom-units/dbus-org.freedesktop.network1.service
@@ -0,0 +1,69 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+#
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+
+[Unit]
+Description=Network Configuration
+Documentation=man:systemd-networkd.service(8)
+Documentation=man:org.freedesktop.network1(5)
+ConditionCapability=CAP_NET_ADMIN
+DefaultDependencies=no
+# systemd-udevd.service can be dropped once tuntap is moved to netlink
+After=systemd-networkd.socket systemd-udevd.service network-pre.target systemd-sysusers.service systemd-sysctl.service
+Before=network.target multi-user.target shutdown.target initrd-switch-root.target
+Conflicts=shutdown.target initrd-switch-root.target
+Wants=systemd-networkd.socket network.target systemd-networkd-persistent-storage.service
+
+[Service]
+AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_BPF CAP_SYS_ADMIN
+BusName=org.freedesktop.network1
+CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE CAP_NET_BROADCAST CAP_NET_RAW CAP_BPF CAP_SYS_ADMIN
+DeviceAllow=char-* rw
+ExecStart=!!/usr/lib/systemd/systemd-networkd
+FileDescriptorStoreMax=512
+ImportCredential=network.wireguard.*
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+ProtectProc=invisible
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectSystem=strict
+Restart=on-failure
+RestartKillSignal=SIGUSR2
+RestartSec=0
+RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6 AF_PACKET
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RuntimeDirectory=systemd/netif
+RuntimeDirectoryPreserve=yes
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service bpf
+Type=notify-reload
+User=systemd-network
+WatchdogSec=3min
+
+[Install]
+WantedBy=multi-user.target
+Also=systemd-networkd.socket
+Alias=dbus-org.freedesktop.network1.service
+
+# The output from this generator is used by udevd and networkd. Enable it by
+# default when enabling systemd-networkd.service.
+Also=systemd-network-generator.service
+
+# We want to enable systemd-networkd-wait-online.service whenever this service
+# is enabled. systemd-networkd-wait-online.service has
+# WantedBy=network-online.target, so enabling it only has an effect if
+# network-online.target itself is enabled or pulled in by some other unit.
+Also=systemd-networkd-wait-online.service
diff --git a/straper/db/public/services/custom-units/dbus-org.freedesktop.resolve1.service b/straper/db/public/services/custom-units/dbus-org.freedesktop.resolve1.service
new file mode 100644
index 0000000..d100f70
--- /dev/null
+++ b/straper/db/public/services/custom-units/dbus-org.freedesktop.resolve1.service
@@ -0,0 +1,59 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+#
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+
+[Unit]
+Description=Network Name Resolution
+Documentation=man:systemd-resolved.service(8)
+Documentation=man:org.freedesktop.resolve1(5)
+Documentation=https://systemd.io/WRITING_NETWORK_CONFIGURATION_MANAGERS
+Documentation=https://systemd.io/WRITING_RESOLVER_CLIENTS
+
+DefaultDependencies=no
+After=systemd-sysctl.service systemd-sysusers.service
+Before=sysinit.target network.target nss-lookup.target shutdown.target initrd-switch-root.target
+Conflicts=shutdown.target initrd-switch-root.target
+Wants=nss-lookup.target
+
+[Service]
+AmbientCapabilities=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
+BusName=org.freedesktop.resolve1
+CapabilityBoundingSet=CAP_SETPCAP CAP_NET_RAW CAP_NET_BIND_SERVICE
+ExecStart=!!/usr/lib/systemd/systemd-resolved
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateTmp=disconnected
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+Restart=always
+RestartSec=0
+RestrictAddressFamilies=AF_UNIX AF_NETLINK AF_INET AF_INET6
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RuntimeDirectory=systemd/resolve
+RuntimeDirectoryPreserve=yes
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service
+Type=notify-reload
+User=systemd-resolve
+ImportCredential=network.dns
+ImportCredential=network.search_domains
+WatchdogSec=3min
+
+[Install]
+WantedBy=sysinit.target
+Alias=dbus-org.freedesktop.resolve1.service
diff --git a/straper/db/public/services/custom-units/dbus-org.freedesktop.timesync1.service b/straper/db/public/services/custom-units/dbus-org.freedesktop.timesync1.service
new file mode 100644
index 0000000..47445bc
--- /dev/null
+++ b/straper/db/public/services/custom-units/dbus-org.freedesktop.timesync1.service
@@ -0,0 +1,60 @@
+# SPDX-License-Identifier: LGPL-2.1-or-later
+#
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it
+# under the terms of the GNU Lesser General Public License as published by
+# the Free Software Foundation; either version 2.1 of the License, or
+# (at your option) any later version.
+
+[Unit]
+Description=Network Time Synchronization
+Documentation=man:systemd-timesyncd.service(8)
+ConditionCapability=CAP_SYS_TIME
+ConditionVirtualization=!container
+DefaultDependencies=no
+After=systemd-sysusers.service
+Before=time-set.target sysinit.target shutdown.target
+Conflicts=shutdown.target
+Wants=time-set.target
+
+[Service]
+AmbientCapabilities=CAP_SYS_TIME
+BusName=org.freedesktop.timesync1
+CapabilityBoundingSet=CAP_SYS_TIME
+# Turn off DNSSEC validation for hostname look-ups, since those need the
+# correct time to work, but we likely won't acquire that without NTP. Let's
+# break this chicken-and-egg cycle here.
+Environment=SYSTEMD_NSS_RESOLVE_VALIDATE=0
+ExecStart=!!/usr/lib/systemd/systemd-timesyncd
+LockPersonality=yes
+MemoryDenyWriteExecute=yes
+NoNewPrivileges=yes
+PrivateDevices=yes
+PrivateTmp=disconnected
+ProtectProc=invisible
+ProtectControlGroups=yes
+ProtectHome=yes
+ProtectHostname=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+Restart=always
+RestartSec=0
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+RestrictNamespaces=yes
+RestrictRealtime=yes
+RestrictSUIDSGID=yes
+RuntimeDirectory=systemd/timesync
+StateDirectory=systemd/timesync
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service @clock
+Type=notify
+User=systemd-timesync
+WatchdogSec=3min
+
+[Install]
+WantedBy=sysinit.target
+Alias=dbus-org.freedesktop.timesync1.service
diff --git a/straper/db/public/services/custom-units/dnsmasq.service b/straper/db/public/services/custom-units/dnsmasq.service
new file mode 100644
index 0000000..a7be6d9
--- /dev/null
+++ b/straper/db/public/services/custom-units/dnsmasq.service
@@ -0,0 +1,18 @@
+[Unit]
+Description=dnsmasq (local DNS forwarder)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=/usr/sbin/dnsmasq -k \
+ --no-resolv \
+ --resolv-file=/dev/null \
+ --server=127.0.0.1#5353 \
+ --conf-file=/etc/dnsmasq.conf \
+ --conf-dir=/etc/dnsmasq.d,*.conf
+ExecReload=/bin/kill -HUP $MAINPID
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/docker.service.d/override.conf b/straper/db/public/services/custom-units/docker.service.d/override.conf
new file mode 100644
index 0000000..614a548
--- /dev/null
+++ b/straper/db/public/services/custom-units/docker.service.d/override.conf
@@ -0,0 +1,3 @@
+[Unit]
+After=nftables.service
+Wants=nftables.service
diff --git a/straper/db/public/services/custom-units/loki.service b/straper/db/public/services/custom-units/loki.service
new file mode 100644
index 0000000..2885fac
--- /dev/null
+++ b/straper/db/public/services/custom-units/loki.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=Loki service
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=loki
+ExecStart=/usr/bin/loki -config.file /etc/loki/config.yml
+# Give a reasonable amount of time for the server to start up/shut down
+TimeoutSec = 120
+Restart = on-failure
+RestartSec = 2
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/lufi.service b/straper/db/public/services/custom-units/lufi.service
new file mode 100644
index 0000000..0d6c415
--- /dev/null
+++ b/straper/db/public/services/custom-units/lufi.service
@@ -0,0 +1,19 @@
+[Unit]
+Description=Lufi (Mojolicious)
+After=network.target
+
+[Service]
+Type=forking
+User=lufi
+Group=lufi
+WorkingDirectory=/srv/lufi
+Environment=MOJO_MODE=production
+ExecStart=/bin/bash -lc 'cd /srv/lufi && /usr/local/bin/carton exec hypnotoad script/lufi'
+ExecStop=/bin/bash -lc 'cd /srv/lufi && /usr/local/bin/carton exec hypnotoad -s script/lufi'
+PIDFile=/srv/lufi/hypnotoad.pid
+Restart=on-failure
+RestartSec=2
+
+[Install]
+WantedBy=multi-user.target
+
diff --git a/straper/db/public/services/custom-units/nftables.service.d/override.conf b/straper/db/public/services/custom-units/nftables.service.d/override.conf
new file mode 100644
index 0000000..fa12217
--- /dev/null
+++ b/straper/db/public/services/custom-units/nftables.service.d/override.conf
@@ -0,0 +1,2 @@
+[Unit]
+After=docker.service
diff --git a/straper/db/public/services/custom-units/paperless.service b/straper/db/public/services/custom-units/paperless.service
new file mode 100644
index 0000000..c95bc63
--- /dev/null
+++ b/straper/db/public/services/custom-units/paperless.service
@@ -0,0 +1,28 @@
+[Unit]
+Description=Paperless-ngx
+Requires=docker.service
+Wants=network-online.target
+After=docker.service network-online.target
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+WorkingDirectory=/srv/paperless
+
+# Wait until Docker actually answers
+ExecStartPre=/usr/bin/docker info
+
+# Retry startup in case of transient dbus / cgroup failure
+ExecStart=/bin/sh -c 'for i in 1 2 3 4 5; do /usr/bin/docker compose up -d && exit 0; sleep 10; done; exit 1'
+
+ExecStop=/usr/bin/docker compose down
+
+Restart=on-failure
+RestartSec=10
+StartLimitIntervalSec=0
+
+TimeoutStartSec=0
+
+[Install]
+WantedBy=multi-user.target
+
diff --git a/straper/db/public/services/custom-units/promtail.service b/straper/db/public/services/custom-units/promtail.service
new file mode 100644
index 0000000..258e40a
--- /dev/null
+++ b/straper/db/public/services/custom-units/promtail.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=Promtail service
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=promtail
+ExecStart=/usr/bin/promtail -config.file /etc/promtail/config.yml
+# Give a reasonable amount of time for promtail to start up/shut down
+TimeoutSec = 60
+Restart = on-failure
+RestartSec = 2
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/smartd.service b/straper/db/public/services/custom-units/smartd.service
new file mode 100644
index 0000000..f2f175c
--- /dev/null
+++ b/straper/db/public/services/custom-units/smartd.service
@@ -0,0 +1,17 @@
+[Unit]
+Description=Self Monitoring and Reporting Technology (SMART) Daemon
+Documentation=man:smartd(8) man:smartd.conf(5)
+
+# Typically physical storage devices are managed by the host physical machine
+# Override it if you are using PCI/USB passthrough
+ConditionVirtualization=no
+
+[Service]
+Type=notify
+EnvironmentFile=-/etc/default/smartmontools
+ExecStart=/usr/sbin/smartd -n $smartd_opts
+ExecReload=/bin/kill -HUP $MAINPID
+
+[Install]
+WantedBy=multi-user.target
+Alias=smartd.service
diff --git a/straper/db/public/services/custom-units/speedtest-exporter.service b/straper/db/public/services/custom-units/speedtest-exporter.service
new file mode 100644
index 0000000..275b8e2
--- /dev/null
+++ b/straper/db/public/services/custom-units/speedtest-exporter.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=Prometheus Speedtest Exporter
+After=network.target
+
+[Service]
+Type=simple
+User=lukasz
+ExecStart=/usr/bin/python3 -m prometheus_speedtest.prometheus_speedtest
+Environment=PYTHONPATH=/home/lukasz/.local/lib/python3.13/site-packages
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
diff --git a/straper/db/public/services/custom-units/sshd.service b/straper/db/public/services/custom-units/sshd.service
new file mode 100644
index 0000000..0eb0d67
--- /dev/null
+++ b/straper/db/public/services/custom-units/sshd.service
@@ -0,0 +1,22 @@
+[Unit]
+Description=OpenBSD Secure Shell server
+Documentation=man:sshd(8) man:sshd_config(5)
+After=network.target nss-user-lookup.target auditd.service
+ConditionPathExists=!/etc/ssh/sshd_not_to_be_run
+
+[Service]
+EnvironmentFile=-/etc/default/ssh
+ExecStartPre=/usr/sbin/sshd -t
+ExecStart=/usr/sbin/sshd -D $SSHD_OPTS
+ExecReload=/usr/sbin/sshd -t
+ExecReload=/bin/kill -HUP $MAINPID
+KillMode=process
+Restart=on-failure
+RestartPreventExitStatus=255
+Type=notify
+RuntimeDirectory=sshd
+RuntimeDirectoryMode=0755
+
+[Install]
+WantedBy=multi-user.target
+Alias=sshd.service
diff --git a/straper/db/public/services/custom-units/zed.service b/straper/db/public/services/custom-units/zed.service
new file mode 100644
index 0000000..acc1230
--- /dev/null
+++ b/straper/db/public/services/custom-units/zed.service
@@ -0,0 +1,13 @@
+[Unit]
+Description=ZFS Event Daemon (zed)
+Documentation=man:zed(8)
+ConditionPathIsDirectory=/sys/module/zfs
+
+[Service]
+EnvironmentFile=-/etc/default/zfs
+ExecStart=/usr/sbin/zed -F
+Restart=always
+
+[Install]
+Alias=zed.service
+WantedBy=zfs.target
diff --git a/straper/db/public/services/custom-units/zfs-import-scan.service.d/override.conf b/straper/db/public/services/custom-units/zfs-import-scan.service.d/override.conf
new file mode 100644
index 0000000..83069c5
--- /dev/null
+++ b/straper/db/public/services/custom-units/zfs-import-scan.service.d/override.conf
@@ -0,0 +1,3 @@
+[Unit]
+After=cryptsetup.target lvm2-monitor.service
+Requires=cryptsetup.target lvm2-monitor.service
diff --git a/straper/db/public/services/journald.conf b/straper/db/public/services/journald.conf
new file mode 100644
index 0000000..1d10166
--- /dev/null
+++ b/straper/db/public/services/journald.conf
@@ -0,0 +1,52 @@
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it under the
+# terms of the GNU Lesser General Public License as published by the Free
+# Software Foundation; either version 2.1 of the License, or (at your option)
+# any later version.
+#
+# Entries in this file show the compile time defaults. Local configuration
+# should be created by either modifying this file (or a copy of it placed in
+# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
+# the /etc/systemd/journald.conf.d/ directory. The latter is generally
+# recommended. Defaults can be restored by simply deleting the main
+# configuration file and all drop-ins located in /etc/.
+#
+# Use 'systemd-analyze cat-config systemd/journald.conf' to display the full config.
+#
+# See journald.conf(5) for details.
+
+[Journal]
+#Storage=auto
+#Compress=yes
+#Seal=yes
+#SplitMode=uid
+#SyncIntervalSec=5m
+#RateLimitIntervalSec=30s
+#RateLimitBurst=10000
+#SystemMaxUse=
+#SystemKeepFree=
+#SystemMaxFileSize=
+#SystemMaxFiles=100
+#RuntimeMaxUse=
+#RuntimeKeepFree=
+#RuntimeMaxFileSize=
+#RuntimeMaxFiles=100
+#MaxRetentionSec=0
+#MaxFileSec=1month
+#ForwardToSyslog=no
+#ForwardToKMsg=no
+#ForwardToConsole=no
+#ForwardToWall=yes
+#TTYPath=/dev/console
+#MaxLevelStore=debug
+#MaxLevelSyslog=debug
+#MaxLevelKMsg=notice
+#MaxLevelConsole=info
+#MaxLevelWall=emerg
+#MaxLevelSocket=debug
+#LineMax=48K
+#ReadKMsg=yes
+#Audit=yes
+Storage=persistent
+SystemMaxUse=1G
diff --git a/straper/db/public/services/logind.conf b/straper/db/public/services/logind.conf
new file mode 100644
index 0000000..3fd61fb
--- /dev/null
+++ b/straper/db/public/services/logind.conf
@@ -0,0 +1,59 @@
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it under the
+# terms of the GNU Lesser General Public License as published by the Free
+# Software Foundation; either version 2.1 of the License, or (at your option)
+# any later version.
+#
+# Entries in this file show the compile time defaults. Local configuration
+# should be created by either modifying this file (or a copy of it placed in
+# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
+# the /etc/systemd/logind.conf.d/ directory. The latter is generally
+# recommended. Defaults can be restored by simply deleting the main
+# configuration file and all drop-ins located in /etc/.
+#
+# Use 'systemd-analyze cat-config systemd/logind.conf' to display the full config.
+#
+# See logind.conf(5) for details.
+
+[Login]
+#NAutoVTs=6
+#ReserveVT=6
+#KillUserProcesses=no
+#KillOnlyUsers=
+#KillExcludeUsers=root
+#InhibitDelayMaxSec=5
+#UserStopDelaySec=10
+#SleepOperation=suspend-then-hibernate suspend
+#HandlePowerKey=poweroff
+#HandlePowerKeyLongPress=ignore
+#HandleRebootKey=reboot
+#HandleRebootKeyLongPress=poweroff
+#HandleSuspendKey=suspend
+#HandleSuspendKeyLongPress=hibernate
+#HandleHibernateKey=hibernate
+#HandleHibernateKeyLongPress=ignore
+#HandleLidSwitch=suspend
+#HandleLidSwitchExternalPower=suspend
+#HandleLidSwitchDocked=ignore
+#HandleSecureAttentionKey=secure-attention-key
+#PowerKeyIgnoreInhibited=no
+#SuspendKeyIgnoreInhibited=no
+#HibernateKeyIgnoreInhibited=no
+#LidSwitchIgnoreInhibited=yes
+#RebootKeyIgnoreInhibited=no
+#HoldoffTimeoutSec=30s
+#IdleAction=ignore
+#IdleActionSec=30min
+#RuntimeDirectorySize=10%
+#RuntimeDirectoryInodesMax=
+#RemoveIPC=yes
+#InhibitorsMax=8192
+#SessionsMax=8192
+#StopIdleSessionSec=infinity
+#DesignatedMaintenanceTime=
+HandleLidSwitch=ignore
+HandleLidSwitchExternalPower=ignore
+HandleLidSwitchDocked=ignore
+IdleAction=ignore
+
diff --git a/straper/db/public/services/system.conf b/straper/db/public/services/system.conf
new file mode 100644
index 0000000..61a3d36
--- /dev/null
+++ b/straper/db/public/services/system.conf
@@ -0,0 +1,84 @@
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it under the
+# terms of the GNU Lesser General Public License as published by the Free
+# Software Foundation; either version 2.1 of the License, or (at your option)
+# any later version.
+#
+# Entries in this file show the compile time defaults. Local configuration
+# should be created by either modifying this file (or a copy of it placed in
+# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
+# /etc/systemd/system.conf.d/ directory. The latter is generally recommended.
+# Defaults can be restored by simply deleting the main configuration file and
+# all drop-ins located in /etc/.
+#
+# Use 'systemd-analyze cat-config systemd/system.conf' to display the full config.
+#
+# See systemd-system.conf(5) for details.
+
+[Manager]
+#LogLevel=info
+#LogTarget=journal-or-kmsg
+#LogColor=yes
+#LogLocation=no
+#LogTime=no
+#DumpCore=yes
+#ShowStatus=yes
+#CrashChangeVT=no
+#CrashShell=no
+#CrashAction=freeze
+#CtrlAltDelBurstAction=reboot-force
+#CPUAffinity=
+#NUMAPolicy=default
+#NUMAMask=
+#RuntimeWatchdogSec=off
+#RuntimeWatchdogPreSec=off
+#RuntimeWatchdogPreGovernor=
+#RebootWatchdogSec=10min
+#KExecWatchdogSec=off
+#WatchdogDevice=
+#CapabilityBoundingSet=
+#NoNewPrivileges=no
+#ProtectSystem=auto
+#SystemCallArchitectures=
+#TimerSlackNSec=
+#StatusUnitFormat=combined
+#DefaultTimerAccuracySec=1min
+#DefaultStandardOutput=journal
+#DefaultStandardError=inherit
+#DefaultTimeoutStartSec=90s
+#DefaultTimeoutStopSec=90s
+#DefaultTimeoutAbortSec=
+#DefaultDeviceTimeoutSec=90s
+#DefaultRestartSec=100ms
+#DefaultStartLimitIntervalSec=10s
+#DefaultStartLimitBurst=5
+#DefaultEnvironment=
+#DefaultCPUAccounting=yes
+#DefaultIOAccounting=no
+#DefaultIPAccounting=no
+#DefaultMemoryAccounting=yes
+#DefaultTasksAccounting=yes
+#DefaultTasksMax=15%
+#DefaultLimitCPU=
+#DefaultLimitFSIZE=
+#DefaultLimitDATA=
+#DefaultLimitSTACK=
+#DefaultLimitCORE=
+#DefaultLimitRSS=
+#DefaultLimitNOFILE=1024:524288
+#DefaultLimitAS=
+#DefaultLimitNPROC=
+#DefaultLimitMEMLOCK=8M
+#DefaultLimitLOCKS=
+#DefaultLimitSIGPENDING=
+#DefaultLimitMSGQUEUE=
+#DefaultLimitNICE=
+#DefaultLimitRTPRIO=
+#DefaultLimitRTTIME=
+#DefaultMemoryPressureThresholdSec=200ms
+#DefaultMemoryPressureWatch=auto
+#DefaultOOMPolicy=stop
+#DefaultSmackProcessLabel=
+#ReloadLimitIntervalSec=
+#ReloadLimitBurst=
diff --git a/straper/db/public/services/timers.txt b/straper/db/public/services/timers.txt
new file mode 100644
index 0000000..58e5305
--- /dev/null
+++ b/straper/db/public/services/timers.txt
@@ -0,0 +1,17 @@
+NEXT LEFT LAST PASSED UNIT ACTIVATES
+Fri 2026-03-20 16:32:53 CET 4min 59s Fri 2026-03-20 15:31:13 CET 56min ago anacron.timer anacron.service
+Fri 2026-03-20 16:37:20 CET 9min Fri 2026-03-20 16:22:20 CET 5min ago prometheus-node-exporter-apt.timer prometheus-node-exporter-apt.service
+Fri 2026-03-20 16:37:20 CET 9min Fri 2026-03-20 16:22:20 CET 5min ago prometheus-node-exporter-nvme.timer prometheus-node-exporter-nvme.service
+Fri 2026-03-20 21:27:38 CET 4h 59min Fri 2026-03-20 11:30:22 CET 4h 57min ago certbot.timer certbot.service
+Sat 2026-03-21 00:00:00 CET 7h Fri 2026-03-20 00:00:01 CET 16h ago dpkg-db-backup.timer dpkg-db-backup.service
+Sat 2026-03-21 00:26:41 CET 7h Fri 2026-03-20 01:34:50 CET 14h ago man-db.timer man-db.service
+Sat 2026-03-21 00:43:46 CET 8h Fri 2026-03-20 00:17:49 CET 16h ago plocate-updatedb.timer plocate-updatedb.service
+Sat 2026-03-21 00:48:18 CET 8h Fri 2026-03-20 14:13:00 CET 2h 14min ago apt-daily.timer apt-daily.service
+Sat 2026-03-21 00:48:59 CET 8h Fri 2026-03-20 00:34:27 CET 15h ago logrotate.timer logrotate.service
+Sat 2026-03-21 06:44:43 CET 14h Fri 2026-03-20 06:54:52 CET 9h ago apt-daily-upgrade.timer apt-daily-upgrade.service
+Sat 2026-03-21 08:22:05 CET 15h Fri 2026-03-20 08:22:05 CET 8h ago systemd-tmpfiles-clean.timer systemd-tmpfiles-clean.service
+Sun 2026-03-22 03:10:37 CET 1 day 10h Sun 2026-03-15 03:10:30 CET 5 days ago e2scrub_all.timer e2scrub_all.service
+Mon 2026-03-23 00:23:58 CET 2 days Mon 2026-03-16 00:50:34 CET 4 days ago zfs-scrub-weekly@tank.timer zfs-scrub@tank.service
+Mon 2026-03-23 01:39:00 CET 2 days Mon 2026-03-16 00:37:56 CET 4 days ago fstrim.timer fstrim.service
+
+14 timers listed.
diff --git a/straper/db/public/services/timesyncd.conf b/straper/db/public/services/timesyncd.conf
new file mode 100644
index 0000000..c37ec5a
--- /dev/null
+++ b/straper/db/public/services/timesyncd.conf
@@ -0,0 +1,26 @@
+# This file is part of systemd.
+#
+# systemd is free software; you can redistribute it and/or modify it under the
+# terms of the GNU Lesser General Public License as published by the Free
+# Software Foundation; either version 2.1 of the License, or (at your option)
+# any later version.
+#
+# Entries in this file show the compile time defaults. Local configuration
+# should be created by either modifying this file (or a copy of it placed in
+# /etc/ if the original file is shipped in /usr/), or by creating "drop-ins" in
+# the /etc/systemd/timesyncd.conf.d/ directory. The latter is generally
+# recommended. Defaults can be restored by simply deleting the main
+# configuration file and all drop-ins located in /etc/.
+#
+# Use 'systemd-analyze cat-config systemd/timesyncd.conf' to display the full config.
+#
+# See timesyncd.conf(5) for details.
+
+[Time]
+#NTP=
+#FallbackNTP=0.debian.pool.ntp.org 1.debian.pool.ntp.org 2.debian.pool.ntp.org 3.debian.pool.ntp.org
+#RootDistanceMaxSec=5
+#PollIntervalMinSec=32
+#PollIntervalMaxSec=2048
+#ConnectionRetrySec=30
+#SaveIntervalSec=60
diff --git a/straper/db/public/services/unit-files-all.txt b/straper/db/public/services/unit-files-all.txt
new file mode 100644
index 0000000..f6a0738
--- /dev/null
+++ b/straper/db/public/services/unit-files-all.txt
@@ -0,0 +1,437 @@
+UNIT FILE STATE PRESET
+proc-sys-fs-binfmt_misc.automount static -
+-.mount generated -
+boot-efi.mount generated -
+boot.mount generated -
+dev-hugepages.mount static -
+dev-mqueue.mount static -
+proc-sys-fs-binfmt_misc.mount disabled disabled
+run-lock.mount disabled enabled
+sys-fs-fuse-connections.mount static -
+sys-kernel-config.mount static -
+sys-kernel-debug.mount generated -
+sys-kernel-tracing.mount static -
+tmp.mount static -
+postfix-resolvconf.path disabled enabled
+systemd-ask-password-console.path static -
+systemd-ask-password-wall.path static -
+docker-12691eeac724c8cbfb02eb2475b10ff2b3c068688189fac8fc811e16220ad9b4.scope transient -
+docker-13c82ccb1e37b62b3dcbe177f521f9268db0595679c3d5ed68cd08c11201d356.scope transient -
+docker-14b6843e8e1bc996abf0f7b7610e01d8a42d4bae83664dc92e4da70d45825427.scope transient -
+docker-2bacb550561f1b8062f243f3b9f258609dcf1d1fabf2728d7a5f9ca0f789b5af.scope transient -
+docker-452f0403dbb2ca046cc732d6e09e6e3deb0105cbaa90b8a38f3008fd7e72c6a6.scope transient -
+docker-473056ec297eff4e780f3df3781c54ca03d8985333f22e95c49222574ab5f20d.scope transient -
+docker-4e9cf1a12c816d2c1a44de5e81a2689b3acedd703584077f7641dce58f4a4085.scope transient -
+docker-52ae17964613bafadb51341aaa5f2b394626041da1f5844042bc47f21430b3b7.scope transient -
+docker-5b3ecdcc01dfd43cec1e3c5118dc29ce521e2f10085f7dbb5b013029ae6f4d2d.scope transient -
+docker-716d1bf72c56ecb9ba07912ca37a4f2c7ed38a781779dda17d9e03826f787434.scope transient -
+docker-729fc0d46552426a8fc6ff0797422b0db1f583ce3559c11239e0ce0ec648f8be.scope transient -
+docker-7d02a3ef69f61f0c5ea27de3949a8f142be75a86464a6feeeb8a99e9ee13645d.scope transient -
+docker-7ef9c58dd5bbc841da16aa0147353b530a5d893fad1136be5567224a7425d765.scope transient -
+docker-80f793993045b90529c415543bd9621032c093bfa9136d681f1737ab5366a20a.scope transient -
+docker-8c116376e475806be71993e11693709e5cb9b3b6cc32a762f06fb7d1a66d1a15.scope transient -
+docker-a5427aebe224a96ccfc99845fbd4525ac556bb7f57904c38c83df6fd497bb461.scope transient -
+docker-b17f24b1e57d1c4fa5178b03e4b70e5f903cdd47b96957a050089f7043079781.scope transient -
+docker-d443e09aa8fa91fbf80e9db1c530b7ed7e0c486c42462738fd4fb0bf5d9b3d3b.scope transient -
+docker-eb223aa2789f988c1da02d973b29d46a5f96bcdfcce5eeebcb6cac756804e7cd.scope transient -
+docker-f967007629cd81e74bdc1e4a934349e226fe57a687b429b275963fb6fdc6fca7.scope transient -
+session-1.scope transient -
+session-1815.scope transient -
+session-1826.scope transient -
+session-2691.scope transient -
+session-4952.scope transient -
+session-5447.scope transient -
+session-5617.scope transient -
+session-637.scope transient -
+session-6435.scope transient -
+agate.service enabled enabled
+alloy.service enabled enabled
+anacron.service enabled enabled
+apparmor.service enabled enabled
+apt-daily-upgrade.service static -
+apt-daily.service static -
+apt-listchanges.service static -
+autovt@.service alias -
+avahi-daemon.service masked enabled
+battery-limit.service disabled enabled
+blk-availability.service enabled enabled
+bluetooth.service disabled enabled
+bolt.service static -
+capsule@.service static -
+certbot.service static -
+console-getty.service disabled disabled
+console-setup.service enabled enabled
+container-getty@.service static -
+containerd.service enabled enabled
+cron.service enabled enabled
+cryptdisks-early.service masked enabled
+cryptdisks.service masked enabled
+dbus-fi.w1.wpa_supplicant1.service alias -
+dbus-org.freedesktop.hostname1.service alias -
+dbus-org.freedesktop.locale1.service alias -
+dbus-org.freedesktop.login1.service alias -
+dbus-org.freedesktop.network1.service alias -
+dbus-org.freedesktop.resolve1.service alias -
+dbus-org.freedesktop.timedate1.service alias -
+dbus-org.freedesktop.timesync1.service alias -
+dbus.service static -
+debug-shell.service disabled disabled
+dm-event.service static -
+dnsmasq.service enabled enabled
+dnsmasq@.service disabled enabled
+docker.service enabled enabled
+dpkg-db-backup.service static -
+e2scrub@.service static -
+e2scrub_all.service static -
+e2scrub_fail@.service static -
+e2scrub_reap.service enabled enabled
+emergency.service static -
+fail2ban.service enabled enabled
+fstrim.service static -
+fwupd-refresh.service masked enabled
+fwupd.service static -
+getty-static.service static -
+getty@.service enabled enabled
+grafana-server.service enabled enabled
+grub-common.service enabled enabled
+hwclock.service masked enabled
+i2pd.service enabled enabled
+ifup@.service static -
+ifupdown-pre.service static -
+ifupdown-wait-online.service disabled enabled
+initrd-cleanup.service static -
+initrd-parse-etc.service static -
+initrd-switch-root.service static -
+initrd-udevadm-cleanup-db.service static -
+ipmidrv.service alias -
+ipmievd.service disabled enabled
+keyboard-setup.service enabled enabled
+kmod-static-nodes.service static -
+kmod.service alias -
+ldconfig.service static -
+lm-sensors.service enabled enabled
+logrotate.service static -
+loki.service enabled enabled
+lufi.service enabled enabled
+lvm2-lvmpolld.service static -
+lvm2-monitor.service enabled enabled
+man-db.service static -
+mariadb.service enabled enabled
+mariadb@.service disabled enabled
+ModemManager.service disabled enabled
+modprobe@.service static -
+mumble-server.service enabled enabled
+mysql.service alias -
+mysqld.service alias -
+networking.service enabled enabled
+NetworkManager-dispatcher.service disabled enabled
+NetworkManager-wait-online.service enabled enabled
+NetworkManager.service disabled enabled
+nftables.service enabled enabled
+nginx.service enabled enabled
+nm-priv-helper.service static -
+nvmefc-boot-connections.service enabled enabled
+nvmf-autoconnect.service enabled enabled
+nvmf-connect-nbft.service static -
+nvmf-connect@.service static -
+openipmi.service generated -
+pam_namespace.service static -
+paperless.service enabled enabled
+plocate-updatedb.service static -
+polkit.service static -
+postfix-resolvconf.service static -
+postfix.service enabled enabled
+postfix@.service disabled enabled
+powertop.service disabled enabled
+ppp@.service disabled enabled
+procps.service alias -
+prometheus-node-exporter-apt.service static -
+prometheus-node-exporter-ipmitool-sensor.service static -
+prometheus-node-exporter-mellanox-hca-temp.service static -
+prometheus-node-exporter-nvme.service static -
+prometheus-node-exporter-smartmon.service static -
+prometheus-node-exporter.service enabled enabled
+prometheus.service enabled enabled
+promtail.service disabled enabled
+prosody.service enabled enabled
+pygopherd.service enabled enabled
+quotaon-root.service static -
+quotaon@.service static -
+rc-local.service static -
+rescue.service static -
+rsync.service disabled enabled
+serial-getty@.service disabled enabled
+smartd.service alias -
+smartmontools.service enabled enabled
+speedtest-exporter.service enabled enabled
+ssh.service enabled enabled
+sshd-keygen.service enabled enabled
+sshd-unix-local@.service alias -
+sshd.service alias -
+sshd@.service indirect enabled
+sudo.service masked enabled
+system-update-cleanup.service static -
+systemd-ask-password-console.service static -
+systemd-ask-password-wall.service static -
+systemd-backlight@.service static -
+systemd-battery-check.service static -
+systemd-binfmt.service static -
+systemd-boot-check-no-failures.service disabled disabled
+systemd-bsod.service static -
+systemd-confext.service disabled enabled
+systemd-creds@.service static -
+systemd-cryptsetup@nvme0n1p3_crypt.service generated -
+systemd-cryptsetup@zfs_crypt.service generated -
+systemd-exit.service static -
+systemd-firstboot.service static -
+systemd-fsck-root.service enabled-runtime enabled
+systemd-fsck@.service static -
+systemd-growfs-root.service static -
+systemd-growfs@.service static -
+systemd-halt.service static -
+systemd-hibernate-clear.service static -
+systemd-hibernate-resume.service static -
+systemd-hibernate.service static -
+systemd-hostnamed.service static -
+systemd-hwdb-update.service static -
+systemd-hybrid-sleep.service static -
+systemd-initctl.service static -
+systemd-journal-catalog-update.service static -
+systemd-journal-flush.service static -
+systemd-journald-sync@.service static -
+systemd-journald.service static -
+systemd-journald@.service static -
+systemd-kexec.service static -
+systemd-localed.service static -
+systemd-logind.service static -
+systemd-machine-id-commit.service static -
+systemd-modules-load.service static -
+systemd-network-generator.service enabled enabled
+systemd-networkd-persistent-storage.service static -
+systemd-networkd-wait-online.service enabled enabled
+systemd-networkd-wait-online@.service disabled enabled
+systemd-networkd.service enabled enabled
+systemd-pcrextend@.service static -
+systemd-pcrfs-root.service static -
+systemd-pcrfs@.service static -
+systemd-pcrlock-file-system.service disabled enabled
+systemd-pcrlock-firmware-code.service disabled enabled
+systemd-pcrlock-firmware-config.service disabled enabled
+systemd-pcrlock-machine-id.service disabled enabled
+systemd-pcrlock-make-policy.service disabled enabled
+systemd-pcrlock-secureboot-authority.service disabled enabled
+systemd-pcrlock-secureboot-policy.service disabled enabled
+systemd-pcrlock@.service static -
+systemd-pcrmachine.service static -
+systemd-pcrphase-initrd.service static -
+systemd-pcrphase-sysinit.service static -
+systemd-pcrphase.service static -
+systemd-poweroff.service static -
+systemd-pstore.service enabled enabled
+systemd-quotacheck-root.service static -
+systemd-quotacheck@.service static -
+systemd-random-seed.service static -
+systemd-reboot.service static -
+systemd-remount-fs.service enabled-runtime enabled
+systemd-resolved.service enabled enabled
+systemd-rfkill.service masked enabled
+systemd-soft-reboot.service static -
+systemd-storagetm.service static -
+systemd-suspend-then-hibernate.service static -
+systemd-suspend.service static -
+systemd-sysctl.service static -
+systemd-sysext.service disabled enabled
+systemd-sysext@.service static -
+systemd-sysusers.service static -
+systemd-time-wait-sync.service disabled disabled
+systemd-timedated.service static -
+systemd-timesyncd.service enabled enabled
+systemd-tmpfiles-clean.service static -
+systemd-tmpfiles-setup-dev-early.service static -
+systemd-tmpfiles-setup-dev.service static -
+systemd-tmpfiles-setup.service static -
+systemd-tpm2-setup-early.service static -
+systemd-tpm2-setup.service static -
+systemd-udev-load-credentials.service disabled enabled
+systemd-udev-settle.service static -
+systemd-udev-trigger.service static -
+systemd-udevd.service static -
+systemd-update-done.service static -
+systemd-user-sessions.service static -
+systemd-volatile-root.service static -
+systemd-zram-setup@.service static -
+tlp.service masked enabled
+tor.service enabled enabled
+tor@.service indirect enabled
+tor@default.service enabled-runtime enabled
+udev.service alias -
+udisks2.service enabled enabled
+unattended-upgrades.service enabled enabled
+unbound-resolvconf.service disabled enabled
+unbound.service enabled enabled
+upower.service disabled enabled
+usb_modeswitch@.service static -
+usbmuxd.service static -
+user-runtime-dir@.service static -
+user@.service static -
+uuidd.service indirect enabled
+wg-quick@.service indirect enabled
+wpa_supplicant-nl80211@.service disabled enabled
+wpa_supplicant-wired@.service disabled enabled
+wpa_supplicant.service enabled enabled
+wpa_supplicant@.service disabled enabled
+wtmpdb-update-boot.service enabled enabled
+x11-common.service masked enabled
+zed.service alias -
+zfs-import-cache.service enabled enabled
+zfs-import-scan.service enabled disabled
+zfs-import.service masked enabled
+zfs-load-key.service masked enabled
+zfs-load-module.service enabled enabled
+zfs-mount.service enabled enabled
+zfs-scrub@.service static -
+zfs-share.service enabled enabled
+zfs-trim@.service static -
+zfs-volume-wait.service enabled enabled
+zfs-zed.service enabled enabled
+capsule.slice static -
+machine.slice static -
+system-systemd\x2dcryptsetup.slice static -
+system-systemd\x2dveritysetup.slice static -
+user.slice static -
+avahi-daemon.socket masked enabled
+dbus.socket static -
+dm-event.socket enabled enabled
+docker.socket enabled enabled
+lvm2-lvmpolld.socket enabled enabled
+mariadb-extra.socket disabled enabled
+mariadb-extra@.socket disabled enabled
+mariadb.socket disabled enabled
+mariadb@.socket disabled enabled
+ssh.socket disabled enabled
+sshd-unix-local.socket generated -
+syslog.socket static -
+systemd-creds.socket static -
+systemd-hostnamed.socket static -
+systemd-initctl.socket static -
+systemd-journald-audit.socket disabled enabled
+systemd-journald-dev-log.socket static -
+systemd-journald-varlink@.socket static -
+systemd-journald.socket static -
+systemd-journald@.socket disabled enabled
+systemd-networkd.socket enabled enabled
+systemd-pcrextend.socket disabled enabled
+systemd-pcrlock.socket disabled enabled
+systemd-rfkill.socket masked enabled
+systemd-sysext.socket disabled enabled
+systemd-udevd-control.socket static -
+systemd-udevd-kernel.socket static -
+uuidd.socket enabled enabled
+dev-zram0.swap generated -
+basic.target static -
+blockdev@.target static -
+bluetooth.target static -
+boot-complete.target static -
+cryptsetup-pre.target static -
+cryptsetup.target static -
+ctrl-alt-del.target alias -
+default.target alias -
+emergency.target static -
+exit.target disabled disabled
+factory-reset.target static -
+final.target static -
+first-boot-complete.target static -
+getty-pre.target static -
+getty.target static -
+graphical.target static -
+halt.target disabled disabled
+hibernate.target masked enabled
+hybrid-sleep.target masked enabled
+initrd-fs.target static -
+initrd-root-device.target static -
+initrd-root-fs.target static -
+initrd-switch-root.target static -
+initrd-usr-fs.target static -
+initrd.target static -
+integritysetup-pre.target static -
+integritysetup.target static -
+kexec.target disabled disabled
+local-fs-pre.target static -
+local-fs.target static -
+multi-user.target static -
+network-online.target static -
+network-pre.target static -
+network.target static -
+nss-lookup.target static -
+nss-user-lookup.target static -
+nvmf-connect.target static -
+paths.target static -
+poweroff.target disabled disabled
+printer.target static -
+reboot.target disabled enabled
+remote-cryptsetup.target disabled enabled
+remote-fs-pre.target static -
+remote-fs.target enabled enabled
+remote-veritysetup.target disabled enabled
+rescue-ssh.target static -
+rescue.target static -
+rpcbind.target static -
+runlevel0.target alias -
+runlevel1.target alias -
+runlevel2.target alias -
+runlevel3.target alias -
+runlevel4.target alias -
+runlevel5.target alias -
+runlevel6.target alias -
+shutdown.target static -
+sigpwr.target static -
+sleep.target masked enabled
+slices.target static -
+smartcard.target static -
+sockets.target static -
+soft-reboot.target static -
+sound.target static -
+ssh-access.target static -
+storage-target-mode.target static -
+suspend-then-hibernate.target static -
+suspend.target masked enabled
+swap.target static -
+sysinit.target static -
+system-update-pre.target static -
+system-update.target static -
+time-set.target static -
+time-sync.target static -
+timers.target static -
+tpm2.target static -
+umount.target static -
+usb-gadget.target static -
+veritysetup-pre.target static -
+veritysetup.target static -
+wg-quick.target static -
+zfs-import.target enabled enabled
+zfs-volumes.target enabled enabled
+zfs.target enabled enabled
+anacron.timer enabled enabled
+apt-daily-upgrade.timer enabled enabled
+apt-daily.timer enabled enabled
+apt-listchanges.timer disabled enabled
+certbot.timer enabled enabled
+dpkg-db-backup.timer enabled enabled
+e2scrub_all.timer enabled enabled
+fstrim.timer enabled enabled
+fwupd-refresh.timer disabled enabled
+logrotate.timer enabled enabled
+man-db.timer enabled enabled
+plocate-updatedb.timer enabled enabled
+prometheus-node-exporter-apt.timer enabled enabled
+prometheus-node-exporter-ipmitool-sensor.timer disabled enabled
+prometheus-node-exporter-mellanox-hca-temp.timer disabled enabled
+prometheus-node-exporter-nvme.timer enabled enabled
+prometheus-node-exporter-smartmon.timer disabled enabled
+systemd-tmpfiles-clean.timer static -
+zfs-scrub-monthly@.timer disabled enabled
+zfs-scrub-weekly@.timer indirect enabled
+zfs-trim-monthly@.timer disabled enabled
+zfs-trim-weekly@.timer disabled enabled
+
+434 unit files listed.
diff --git a/straper/db/public/services/units-enabled.txt b/straper/db/public/services/units-enabled.txt
new file mode 100644
index 0000000..31ed7cc
--- /dev/null
+++ b/straper/db/public/services/units-enabled.txt
@@ -0,0 +1,82 @@
+UNIT FILE STATE PRESET
+agate.service enabled enabled
+alloy.service enabled enabled
+anacron.service enabled enabled
+apparmor.service enabled enabled
+blk-availability.service enabled enabled
+console-setup.service enabled enabled
+containerd.service enabled enabled
+cron.service enabled enabled
+dnsmasq.service enabled enabled
+docker.service enabled enabled
+e2scrub_reap.service enabled enabled
+fail2ban.service enabled enabled
+getty@.service enabled enabled
+grafana-server.service enabled enabled
+grub-common.service enabled enabled
+i2pd.service enabled enabled
+keyboard-setup.service enabled enabled
+lm-sensors.service enabled enabled
+loki.service enabled enabled
+lufi.service enabled enabled
+lvm2-monitor.service enabled enabled
+mariadb.service enabled enabled
+mumble-server.service enabled enabled
+networking.service enabled enabled
+NetworkManager-wait-online.service enabled enabled
+nftables.service enabled enabled
+nginx.service enabled enabled
+nvmefc-boot-connections.service enabled enabled
+nvmf-autoconnect.service enabled enabled
+paperless.service enabled enabled
+postfix.service enabled enabled
+prometheus-node-exporter.service enabled enabled
+prometheus.service enabled enabled
+prosody.service enabled enabled
+pygopherd.service enabled enabled
+smartmontools.service enabled enabled
+speedtest-exporter.service enabled enabled
+ssh.service enabled enabled
+sshd-keygen.service enabled enabled
+systemd-network-generator.service enabled enabled
+systemd-networkd-wait-online.service enabled enabled
+systemd-networkd.service enabled enabled
+systemd-pstore.service enabled enabled
+systemd-resolved.service enabled enabled
+systemd-timesyncd.service enabled enabled
+tor.service enabled enabled
+udisks2.service enabled enabled
+unattended-upgrades.service enabled enabled
+unbound.service enabled enabled
+wpa_supplicant.service enabled enabled
+wtmpdb-update-boot.service enabled enabled
+zfs-import-cache.service enabled enabled
+zfs-import-scan.service enabled disabled
+zfs-load-module.service enabled enabled
+zfs-mount.service enabled enabled
+zfs-share.service enabled enabled
+zfs-volume-wait.service enabled enabled
+zfs-zed.service enabled enabled
+dm-event.socket enabled enabled
+docker.socket enabled enabled
+lvm2-lvmpolld.socket enabled enabled
+systemd-networkd.socket enabled enabled
+uuidd.socket enabled enabled
+remote-fs.target enabled enabled
+zfs-import.target enabled enabled
+zfs-volumes.target enabled enabled
+zfs.target enabled enabled
+anacron.timer enabled enabled
+apt-daily-upgrade.timer enabled enabled
+apt-daily.timer enabled enabled
+certbot.timer enabled enabled
+dpkg-db-backup.timer enabled enabled
+e2scrub_all.timer enabled enabled
+fstrim.timer enabled enabled
+logrotate.timer enabled enabled
+man-db.timer enabled enabled
+plocate-updatedb.timer enabled enabled
+prometheus-node-exporter-apt.timer enabled enabled
+prometheus-node-exporter-nvme.timer enabled enabled
+
+79 unit files listed.
diff --git a/straper/db/public/services/units-failed.txt b/straper/db/public/services/units-failed.txt
new file mode 100644
index 0000000..5ac303f
--- /dev/null
+++ b/straper/db/public/services/units-failed.txt
@@ -0,0 +1,3 @@
+ UNIT LOAD ACTIVE SUB DESCRIPTION
+
+0 loaded units listed.
diff --git a/straper/db/public/services/units-running.txt b/straper/db/public/services/units-running.txt
new file mode 100644
index 0000000..dbe9da7
--- /dev/null
+++ b/straper/db/public/services/units-running.txt
@@ -0,0 +1,49 @@
+ UNIT LOAD ACTIVE SUB DESCRIPTION
+ agate.service loaded active running Agate Gemini Server
+ alloy.service loaded active running Vendor-agnostic OpenTelemetry Collector distribution with programmable pipelines
+ containerd.service loaded active running containerd container runtime
+ cron.service loaded active running Regular background program processing daemon
+ dbus.service loaded active running D-Bus System Message Bus
+ dnsmasq.service loaded active running dnsmasq (local DNS forwarder)
+ docker.service loaded active running Docker Application Container Engine
+ fail2ban.service loaded active running Fail2Ban Service
+ getty@tty1.service loaded active running Getty on tty1
+ grafana-server.service loaded active running Grafana instance
+ i2pd.service loaded active running I2P Router written in C++
+ loki.service loaded active running Loki service
+ lufi.service loaded active running Lufi (Mojolicious)
+ mariadb.service loaded active running MariaDB 11.8.6 database server
+ mumble-server.service loaded active running Mumble server
+ NetworkManager.service loaded active running Network Manager
+ nginx.service loaded active running A high performance web server and a reverse proxy server
+ polkit.service loaded active running Authorization Manager
+ postfix.service loaded active running Postfix Mail Transport Agent (main/default instance)
+ prometheus-node-exporter.service loaded active running Prometheus exporter for machine metrics
+ prometheus.service loaded active running Monitoring system and time series database
+ prosody.service loaded active running Prosody XMPP Server
+ pygopherd.service loaded active running Pygopherd Server
+ smartmontools.service loaded active running Self Monitoring and Reporting Technology (SMART) Daemon
+ speedtest-exporter.service loaded active running Prometheus Speedtest Exporter
+ ssh.service loaded active running OpenBSD Secure Shell server
+ systemd-ask-password-wall.service loaded active running Forward Password Requests to Wall
+ systemd-journald.service loaded active running Journal Service
+ systemd-logind.service loaded active running User Login Management
+ systemd-networkd.service loaded active running Network Configuration
+ systemd-resolved.service loaded active running Network Name Resolution
+ systemd-timedated.service loaded active running Time & Date Service
+ systemd-timesyncd.service loaded active running Network Time Synchronization
+ systemd-udevd.service loaded active running Rule-based Manager for Device Events and Files
+ tor@default.service loaded active running Anonymizing overlay network for TCP
+ udisks2.service loaded active running Disk Manager
+ unattended-upgrades.service loaded active running Unattended Upgrades Shutdown
+ unbound.service loaded active running Unbound DNS server
+ user@1000.service loaded active running User Manager for UID 1000
+ uuidd.service loaded active running Daemon for generating UUIDs
+ wpa_supplicant.service loaded active running WPA supplicant
+ zfs-zed.service loaded active running ZFS Event Daemon (zed)
+
+Legend: LOAD → Reflects whether the unit definition was properly loaded.
+ ACTIVE → The high-level unit activation state, i.e. generalization of SUB.
+ SUB → The low-level unit activation state, values depend on unit type.
+
+42 loaded units listed.