#!/sbin/openrc-run
# Copyright 2026 Nadeŭka <me+oss@nadevko.cc>
# Distributed under the terms of the GNU General Public License v2

name='Unity Auth Broker'
description='Hardened authentication broker daemon for Unity CLI'

command=/usr/bin/unity
command_args='--internal-auth-broker-serve'
command_background=yes
command_user=unity-broker:unity-broker
pidfile=/run/unity-auth-broker/unity-auth-broker.pid

depend() {
	need localmount
	use polkit
	after polkit
}

start_pre() {
	checkpath -d -m 0755 -o unity-broker:unity-broker /run/unity-auth-broker
	checkpath -d -m 0700 -o unity-broker:unity-broker /var/lib/unity-auth-broker
}