Build MVP with Pi installer and atomic updates

systemd/pi-car-companion-update.service

@@ -0,0 +1,13 @@
+[Unit]
+Description=Update Pi Car Companion
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+User=root
+Group=root
+ExecStart=/usr/local/sbin/pi-car-companion-update
+TimeoutStartSec=30min
+Nice=10
+IOSchedulingClass=idle

systemd/pi-car-companion.service

@@ -0,0 +1,33 @@
+[Unit]
+Description=Pi Car Companion
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=pi-companion
+Group=pi-companion
+WorkingDirectory=/opt/pi-car-companion/current
+EnvironmentFile=/etc/pi-car-companion/companion.env
+ExecStart=/usr/bin/node /opt/pi-car-companion/current/server/dist/index.js
+Restart=on-failure
+RestartSec=5s
+TimeoutStopSec=20s
+KillSignal=SIGTERM
+UMask=0027
+StateDirectory=pi-car-companion
+NoNewPrivileges=false
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ProtectKernelTunables=true
+ProtectKernelModules=true
+ProtectControlGroups=true
+RestrictRealtime=true
+LockPersonality=true
+SystemCallArchitectures=native
+RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
+ReadWritePaths=/var/lib/pi-car-companion
+
+[Install]
+WantedBy=multi-user.target

systemd/pi-car-companion.sudoers

@@ -0,0 +1 @@
+pi-companion ALL=(root) NOPASSWD: /usr/bin/systemctl start --no-block pi-car-companion-update.service