# /etc/systemd/system/shire-marketing-boss.service
[Unit]
Description=SHiRE Marketing Boss Drafting Workspace
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=ray
Group=ray
WorkingDirectory=/home/shire3d/ARMOR/agents/apps/marketing-boss
Environment=PORT=4173
Environment=MARKETING_BOSS_STATE_FILE=/SHiREVault/SHIRE3D/MarketingBoss/state/marketing-boss-state.json
Environment=MARKETING_BOSS_OUTPUT_DIR=/SHiREVault/SHIRE3D/MarketingBoss/campaigns
EnvironmentFile=-/home/shire3d/ARMOR/config/agents/marketing-boss.env
ExecStart=/usr/bin/node /home/shire3d/ARMOR/agents/apps/marketing-boss/server.js
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target

# /etc/systemd/system/shire-marketing-boss.service.d/20-secure-oauth.conf
[Service]
UMask=0077
Environment=PUBLIC_BASE_URL=http://127.0.0.1:4173
Environment=OAUTH_TOKEN_FILE=<redacted>
Environment=FACEBOOK_APP_ID=
Environment=FACEBOOK_APP_SECRET=<redacted>
Environment=INSTAGRAM_APP_ID=
Environment=INSTAGRAM_APP_SECRET=<redacted>
Environment=LINKEDIN_CLIENT_ID=
Environment=LINKEDIN_CLIENT_SECRET=<redacted>
Environment=TIKTOK_CLIENT_KEY=<redacted>
Environment=TIKTOK_CLIENT_SECRET=<redacted>
Environment=GOOGLE_CLIENT_ID=
Environment=GOOGLE_CLIENT_SECRET=<redacted>
LoadCredential=FACEBOOK_APP_ID:<protected-source>
LoadCredential=FACEBOOK_APP_SECRET:<protected-source>
LoadCredential=INSTAGRAM_APP_ID:<protected-source>
LoadCredential=INSTAGRAM_APP_SECRET:<protected-source>
LoadCredential=LINKEDIN_CLIENT_ID:<protected-source>
LoadCredential=LINKEDIN_CLIENT_SECRET:<protected-source>
LoadCredential=TIKTOK_CLIENT_KEY:<protected-source>
LoadCredential=TIKTOK_CLIENT_SECRET:<protected-source>
LoadCredential=GOOGLE_CLIENT_ID:<protected-source>
LoadCredential=GOOGLE_CLIENT_SECRET:<protected-source>
LoadCredential=OAUTH_TOKEN_KEY:<protected-source>

# /etc/systemd/system/shire-marketing-boss.service.d/30-ipv4-preference.conf
[Service]
Environment="NODE_OPTIONS=--dns-result-order=ipv4first"

# /etc/systemd/system/shire-marketing-boss.service.d/30-public-oauth-callback.conf
[Service]
Environment=PUBLIC_BASE_URL=https://marketing-auth.shire3d.com
Environment=FACEBOOK_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/facebook
Environment=INSTAGRAM_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/instagram
Environment=TIKTOK_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/tiktok
Environment=GOOGLE_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/youtube_shorts
Environment=LINKEDIN_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/linkedin

# /etc/systemd/system/shire-marketing-boss.service.d/40-local-oauth-token.conf
[Service]
Environment="OAUTH_TOKEN_FILE=<redacted>
UMask=0077