added systemd service and installation file

agent/systemd/keywarden-agent.env.example

@@ -0,0 +1,13 @@
+# Keywarden server URL (required on first boot if /etc/keywarden/agent.json does not exist)
+KEYWARDEN_SERVER_URL=https://keywarden.example.com/api/v1
+
+# Enrollment token used only for first enrollment / forced re-enrollment.
+# Remove after successful enrollment.
+KEYWARDEN_ENROLL_TOKEN=
+
+# Optional path to a private CA PEM for verifying the Keywarden server TLS cert.
+# KEYWARDEN_SERVER_CA_PATH=/etc/ssl/certs/keywarden-ca.pem
+
+# Optional override for the persisted per-agent token in agent.json.
+# Normally leave unset.
+# KEYWARDEN_AGENT_API_TOKEN=

agent/systemd/keywarden-agent.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=Keywarden Agent
+Documentation=https://git.ntbx.io/boris/keywarden
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+Group=root
+EnvironmentFile=-/etc/default/keywarden-agent
+EnvironmentFile=-/etc/sysconfig/keywarden-agent
+ExecStart=/usr/local/bin/keywarden-agent -config /etc/keywarden/agent.json
+Restart=always
+RestartSec=5
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectControlGroups=true
+ProtectKernelModules=true
+ProtectKernelTunables=true
+
+[Install]
+WantedBy=multi-user.target