Hook up its rc service

sysop/client

@@ -1,3 +1,4 @@
 #!/bin/sh
 
-socat - udp:localhost:5557 <<< "shutdown:$(<shutdown.pre)"
+CMD=${1-shutdown}
+socat - udp:localhost:5557 <<< "$CMD:$(<$CMD.pre)"

sysop/install

@@ -0,0 +1 @@
+useradd -d /var/empty -s /sbin/nologin sysop

sysop/openbsd.toml

@@ -1,10 +1,18 @@
 app = "sysop"
 
 [[site.patch.doas.files]]
-lines = [ "permit nopass :wheel" ]
+lines = [
+    "permit nopass :wheel",
+    "permit nopass sysop as root cmd /usr/bin/nc args -ulkd 0.0.0.0 557",
+    "permit nopass sysop as root cmd /sbin/shutdown",
+]
 mode = 0o400
 dst = "/etc/doas.conf"
 
+[site.patch.sysop]
+service = "sysop"
+install = "install"
+
 [[site.patch.sysop.files]]
 src = "server"
 mode = 0o755
@@ -14,14 +22,15 @@ dst = "/usr/local/bin/sysop"
 src = "shutdown.cmd"
 dst = "/var/sysop/commands/shutdown"
 
-[[site.patch.sysop.files]]
-src = "shutdown.cmd"
-dst = "/var/sysop/commands/shutdown"
-
 [[site.patch.sysop.files]]
 src = "shutdown.tok"
 dst = "/var/sysop/tokens/shutdown"
 
+[[site.patch.sysop.files]]
+src = "service"
+mode = 0o755
+dst = "/etc/rc.d/sysop"
+
 [[run.hostfwd.udp]]
 hport = 5557
 gport = 557

sysop/server

@@ -4,15 +4,15 @@ PORT=557
 ADDR=0.0.0.0
 
 log() {
-    logger -ct sysop -f-
+    logger -ct sysop
 }
 
 ROOT=/var/sysop
 TOKENS=$ROOT/tokens
 COMMANDS=$ROOT/commands
 
 echo "listening udp:$ADDR:$PORT" | log
-doas nc -ulkd "$ADDR" "$PORT" | while IFS=: read CMD TOKEN; do
+doas "$(which /usr/bin/nc)" -ulkd "$ADDR" "$PORT" | while IFS=: read CMD TOKEN; do
     if [ ! -f "$TOKENS/$CMD" ] || [ ! -f "$COMMANDS/$CMD" ]; then
         echo "unknown command: $CMD" | log
         continue

sysop/service

@@ -0,0 +1,9 @@
+#!/bin/ksh
+
+daemon="/usr/local/bin/sysop"
+daemon_user=sysop
+rc_bg=YES
+
+. /etc/rc.d/rc.subr
+
+rc_cmd $1

sysop/shutdown.cmd

@@ -1 +1 @@
-doas shutdown -p now
+doas /sbin/shutdown -p now