Add mautrix-syncproxy and mautrix-wsproxy

ressources/mautrix-syncproxy/rootfs/DEBIAN/conffiles

@@ -0,0 +1 @@
+/etc/default/mautrix-syncproxy

ressources/mautrix-syncproxy/rootfs/DEBIAN/control

@@ -0,0 +1,7 @@
+Package: mautrix-syncproxy
+Version: %VERSION%
+Section: base
+Priority: optional
+Architecture: all
+Maintainer: Thomas Legay <thomas@syngate.fr>
+Description: mautrix-syncproxy

ressources/mautrix-syncproxy/rootfs/DEBIAN/postinst

@@ -0,0 +1,4 @@
+#!/bin/bash
+
+id mautrix-syncproxy &> /dev/null || useradd mautrix-syncproxy -r -s /bin/false -d /
+

ressources/mautrix-syncproxy/rootfs/etc/default/mautrix-syncproxy

@@ -0,0 +1,5 @@
+DATABASE_URL=postgres://syncproxy:xxxxxxxxxx@postgres/syncproxy
+HOMESERVER_URL=https://domaine.fr/
+LISTEN_ADDRESS=:29331
+SHARED_SECRET=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+#DEBUG=true

ressources/mautrix-syncproxy/rootfs/etc/systemd/system/mautrix-syncproxy.service

@@ -0,0 +1,37 @@
+[Unit]
+Description=service mautrix-syncproxy
+Documentation=https://github.com/mautrix/syncproxy
+
+After=network.target
+
+[Service]
+User=mautrix-syncproxy
+Group=mautrix-syncproxy
+EnvironmentFile=/etc/default/mautrix-syncproxy
+ExecStart=/usr/bin/mautrix-syncproxy
+WorkingDirectory=/tmp
+Restart=on-failure
+RestartSec=30s
+#ReadWritePaths=/tmp
+NoNewPrivileges=yes
+MemoryDenyWriteExecute=true
+PrivateDevices=yes
+PrivateTmp=yes
+ProtectHome=yes
+ProtectSystem=strict
+ProtectControlGroups=true
+RestrictSUIDSGID=true
+RestrictRealtime=true
+LockPersonality=true
+ProtectKernelLogs=true
+ProtectKernelTunables=true
+ProtectHostname=true
+ProtectKernelModules=true
+PrivateUsers=true
+ProtectClock=true
+SystemCallArchitectures=native
+SystemCallErrorNumber=EPERM
+SystemCallFilter=@system-service
+
+[Install]
+WantedBy=multi-user.target