# /etc/systemd/system/shire-marketing-boss.service
[Unit]
Description=SHiRE Marketing Boss Drafting Workspace
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=ray
Group=ray
WorkingDirectory=/home/shire3d/ARMOR/agents/apps/marketing-boss
Environment=PORT=4173
Environment=MARKETING_BOSS_STATE_FILE=/SHiREVault/SHIRE3D/MarketingBoss/state/marketing-boss-state.json
Environment=MARKETING_BOSS_OUTPUT_DIR=/SHiREVault/SHIRE3D/MarketingBoss/campaigns
EnvironmentFile=-/home/shire3d/ARMOR/config/agents/marketing-boss.env
ExecStart=/usr/bin/node /home/shire3d/ARMOR/agents/apps/marketing-boss/server.js
Restart=on-failure
RestartSec=3
NoNewPrivileges=true
PrivateTmp=true

[Install]
WantedBy=multi-user.target

# /etc/systemd/system/shire-marketing-boss.service.d/20-secure-oauth.conf
[Service]
UMask=0077
Environment=PUBLIC_BASE_URL=http://127.0.0.1:4173
Environment=OAUTH_TOKEN_FILE=/SHiREVault/SHIRE3D/MarketingBoss/state/social-oauth-tokens.enc.json
Environment=META_APP_ID=
Environment=META_APP_SECRET=
Environment=LINKEDIN_CLIENT_ID=
Environment=LINKEDIN_CLIENT_SECRET=
Environment=TIKTOK_CLIENT_KEY=
Environment=TIKTOK_CLIENT_SECRET=
Environment=GOOGLE_CLIENT_ID=
Environment=GOOGLE_CLIENT_SECRET=
LoadCredential=META_APP_ID:/etc/shire/marketing-boss-credentials/META_APP_ID
LoadCredential=META_APP_SECRET:/etc/shire/marketing-boss-credentials/META_APP_SECRET
LoadCredential=LINKEDIN_CLIENT_ID:/etc/shire/marketing-boss-credentials/LINKEDIN_CLIENT_ID
LoadCredential=LINKEDIN_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/LINKEDIN_CLIENT_SECRET
LoadCredential=TIKTOK_CLIENT_KEY:/etc/shire/marketing-boss-credentials/TIKTOK_CLIENT_KEY
LoadCredential=TIKTOK_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/TIKTOK_CLIENT_SECRET
LoadCredential=GOOGLE_CLIENT_ID:/etc/shire/marketing-boss-credentials/GOOGLE_CLIENT_ID
LoadCredential=GOOGLE_CLIENT_SECRET:/etc/shire/marketing-boss-credentials/GOOGLE_CLIENT_SECRET
LoadCredential=OAUTH_TOKEN_KEY:/etc/shire/marketing-boss-credentials/OAUTH_TOKEN_KEY