Add 'fiscal/' from commit '102ba84500dbd9655a0471288c3e278652593ca9'

git-subtree-dir: fiscal
git-subtree-mainline: d95165fc8f
git-subtree-split: 102ba84500

fiscal/deploy/hub/gti-fiscal-hub-port.service

@@ -0,0 +1,20 @@
+# Re-applies the Hub port restriction (restrict_hub_port.sh) whenever Docker starts.
+# Install:
+#   sudo install -m 0755 restrict_hub_port.sh /usr/local/sbin/gti-fiscal-restrict-hub-port
+#   printf 'HUB_BIND=10.0.10.117\nHUB_PORT=8000\nPROXY_IP=10.0.10.100\nIFACE=ens18\n' | sudo tee /etc/default/gti-fiscal-hub-port
+#   sudo install -m 0644 gti-fiscal-hub-port.service /etc/systemd/system/
+#   sudo systemctl daemon-reload && sudo systemctl enable --now gti-fiscal-hub-port.service
+[Unit]
+Description=GTI Fiscal: allow the Hub port only from the reverse proxy
+After=docker.service
+Requires=docker.service
+PartOf=docker.service
+
+[Service]
+Type=oneshot
+RemainAfterExit=yes
+EnvironmentFile=/etc/default/gti-fiscal-hub-port
+ExecStart=/usr/local/sbin/gti-fiscal-restrict-hub-port
+
+[Install]
+WantedBy=docker.service