feat: publish standalone worker

Separate worker packaging and service lifecycle from the control plane.

packaging/systemd/rsmon-worker.service

@@ -0,0 +1,28 @@
+[Unit]
+Description=RSMon distributed monitoring worker
+Documentation=https://rocketgit.ru/rsmon/worker
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=rsmon-worker
+Group=rsmon-worker
+Environment=HOME=/var/lib/rsmon-worker
+Environment=RSMON_WEBAPP_DATA_DIR=/var/lib/rsmon-worker/webapp
+EnvironmentFile=/etc/rsmon-worker/worker.env
+WorkingDirectory=/var/lib/rsmon-worker
+ExecStart=/usr/local/bin/rsmon-worker
+Restart=always
+RestartSec=5s
+TimeoutStopSec=20s
+AmbientCapabilities=CAP_NET_RAW
+CapabilityBoundingSet=CAP_NET_RAW
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectHome=true
+ProtectSystem=full
+ReadWritePaths=/var/lib/rsmon-worker
+
+[Install]
+WantedBy=multi-user.target

packaging/systemd/worker.env.example

@@ -0,0 +1,16 @@
+RSMON_URL=https://rsmon.ru
+RSMON_TOKEN=replace-with-worker-token
+WORKER_HOST=127.0.0.1
+WORKER_PORT=27401
+WORKER_URL=
+WORKER_LOGIN=admin
+WORKER_PASSWORD=replace-with-a-long-random-password
+RSMON_WEBAPP_DATA_DIR=/var/lib/rsmon-worker/webapp
+WORKER_CLUSTER_ENABLED=false
+WORKER_CLUSTER_ID=
+WORKER_CLUSTER_HOST=127.0.0.1
+WORKER_CLUSTER_PORT=37401
+WORKER_CLUSTER_PEERS=
+WORKER_CLUSTER_DATA_DIR=/var/lib/rsmon-worker/cluster
+WORKER_CLUSTER_BOOTSTRAP=false
+WORKER_RELEASE_URL=