# /etc/systemd/system/shire-marketing-boss.service
[Unit]
Description=SHiRE Marketing Boss Drafting Workspace
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=ray
Group=ray
WorkingDirectory=/home/shire3d/ARMOR/agents/apps/marketing-boss
Environment=PORT=4173
Environment=MARKETING_BOSS_STATE_FILE=/SHiREVault/SHIRE3D/MarketingBoss/state/marketing-boss-state.json
Environment=MARKETING_BOSS_OUTPUT_DIR=/SHiREVault/SHIRE3D/MarketingBoss/campaigns
EnvironmentFile=-/home/shire3d/ARMOR/config/agents/marketing-boss.env
ExecStart=/usr/bin/node /home/shire3d/ARMOR/agents/apps/marketing-boss/server.js
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target

# /etc/systemd/system/shire-marketing-boss.service.d/20-secure-oauth.conf
[Service]
UMask=0077
Environment=PUBLIC_BASE_URL=http://127.0.0.1:4173
Environment=OAUTH_TOKEN_FILE=/SHiREVault/SHIRE3D/MarketingBoss/state/social-oauth-tokens.enc.json
Environment=FACEBOOK_APP_ID=
Environment=FACEBOOK_APP_SECRET=
Environment=INSTAGRAM_APP_ID=
Environment=INSTAGRAM_APP_SECRET=
Environment=LINKEDIN_CLIENT_ID=
Environment=LINKEDIN_CLIENT_SECRET=
Environment=TIKTOK_CLIENT_KEY=
Environment=TIKTOK_CLIENT_SECRET=
Environment=GOOGLE_CLIENT_ID=
Environment=GOOGLE_CLIENT_SECRET=
LoadCredential=FACEBOOK_APP_ID:/etc/shire/marketing-boss-credentials/FACEBOOK_APP_ID
LoadCredential=FACEBOOK_APP_SECRET:/etc/shire/marketing-boss-credentials/FACEBOOK_APP_SECRET
LoadCredential=INSTAGRAM_APP_ID:/etc/shire/marketing-boss-credentials/INSTAGRAM_APP_ID
LoadCredential=INSTAGRAM_APP_SECRET:/etc/shire/marketing-boss-credentials/INSTAGRAM_APP_SECRET
LoadCredential=LINKEDIN_CLIENT_ID:/etc/shire/marketing-boss-credentials/LINKEDIN_CLIENT_ID
LoadCredential=LINKEDIN_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/LINKEDIN_CLIENT_SECRET
LoadCredential=TIKTOK_CLIENT_KEY:/etc/shire/marketing-boss-credentials/TIKTOK_CLIENT_KEY
LoadCredential=TIKTOK_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/TIKTOK_CLIENT_SECRET
LoadCredential=GOOGLE_CLIENT_ID:/etc/shire/marketing-boss-credentials/GOOGLE_CLIENT_ID
LoadCredential=GOOGLE_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/GOOGLE_CLIENT_SECRET
LoadCredential=OAUTH_TOKEN_KEY:/etc/shire/marketing-boss-credentials/OAUTH_TOKEN_KEY

# /etc/systemd/system/shire-marketing-boss.service.d/30-ipv4-preference.conf
[Service]
Environment="NODE_OPTIONS=--dns-result-order=ipv4first"

# /etc/systemd/system/shire-marketing-boss.service.d/30-public-oauth-callback.conf
[Service]
Environment=PUBLIC_BASE_URL=https://marketing-auth.shire3d.com
Environment=FACEBOOK_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/facebook
Environment=INSTAGRAM_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/instagram
Environment=TIKTOK_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/tiktok
Environment=GOOGLE_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/youtube_shorts
Environment=LINKEDIN_REDIRECT_URI=https://marketing-auth.shire3d.com/api/oauth/callback/linkedin