Add systemd service, timer, and socket files

tools/systemd/feedvault-backup.service

@@ -0,0 +1,10 @@
+[Unit]
+Description=FeedVault database backup
+
+[Service]
+Type=oneshot
+User=feedvault
+Group=feedvault
+WorkingDirectory=/home/feedvault/feedvault
+EnvironmentFile=/home/feedvault/feedvault/.env
+ExecStart=/usr/bin/uv run python manage.py backup_db

tools/systemd/feedvault-backup.timer

@@ -0,0 +1,9 @@
+[Unit]
+Description=Nightly FeedVault database backup
+
+[Timer]
+OnCalendar=*-*-* 03:15:00
+Persistent=true
+
+[Install]
+WantedBy=timers.target

tools/systemd/feedvault.service

@@ -0,0 +1,27 @@
+[Unit]
+Description=FeedVault
+Requires=feedvault.socket
+
+[Service]
+User=feedvault
+Group=feedvault
+WorkingDirectory=/home/feedvault/feedvault
+EnvironmentFile=/home/feedvault/feedvault/.env
+RuntimeDirectory=feedvault
+ExecStart=/usr/bin/uv run gunicorn config.wsgi:application --bind unix:/run/feedvault/feedvault.sock --workers 13 --name feedvault --max-requests-jitter 50 --max-requests 1200
+ReadWritePaths=/home/feedvault/feedvault /run/feedvault
+
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectSystem=full
+ProtectHome=no
+CapabilityBoundingSet=
+AmbientCapabilities=
+RestrictRealtime=yes
+LockPersonality=yes
+
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target

tools/systemd/feedvault.socket

@@ -0,0 +1,11 @@
+[Unit]
+Description=FeedVault Socket
+
+[Socket]
+ListenStream=/run/feedvault/feedvault.sock
+SocketUser=feedvault
+SocketGroup=feedvault
+SocketMode=0660
+
+[Install]
+WantedBy=sockets.target