diff --git a/setup.sh b/setup.sh index d3099619..e54c8003 100755 --- a/setup.sh +++ b/setup.sh @@ -91,7 +91,7 @@ setup_runtime_directories() { "/var/lib/aitbc" "/var/lib/aitbc/keystore" "/var/lib/aitbc/data" - "/var/lib/aitbc/logs" + "/var/log/aitbc" "/etc/aitbc" ) @@ -104,26 +104,23 @@ setup_runtime_directories() { chmod 755 /var/lib/aitbc chmod 700 /var/lib/aitbc/keystore # Secure keystore chmod 755 /var/lib/aitbc/data - chmod 755 /var/lib/aitbc/logs + chmod 755 /var/log/aitbc chmod 755 /etc/aitbc # Set ownership chown root:root /var/lib/aitbc chown root:root /var/lib/aitbc/keystore chown root:root /var/lib/aitbc/data - chown root:root /var/lib/aitbc/logs + chown root:root /var/log/aitbc chown root:root /etc/aitbc # Create README files echo "# AITBC Runtime Data Directory" > /var/lib/aitbc/README.md echo "# Keystore for blockchain keys (SECURE)" > /var/lib/aitbc/keystore/README.md echo "# Application databases" > /var/lib/aitbc/data/README.md - echo "# Application logs" > /var/lib/aitbc/logs/README.md + echo "# Application logs" > /var/log/aitbc/README.md echo "# AITBC Configuration Files" > /etc/aitbc/README.md - # Create symlink for standard logging - ln -sf /var/lib/aitbc/logs /var/log/aitbc - success "Runtime directories setup completed" } diff --git a/systemd/aitbc-advanced-ai.service b/systemd/aitbc-advanced-ai.service index 135cd931..ac3a7eff 100644 --- a/systemd/aitbc-advanced-ai.service +++ b/systemd/aitbc-advanced-ai.service @@ -23,7 +23,7 @@ NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true -ReadWritePaths=/var/lib/aitbc/logs /var/lib/aitbc/data +ReadWritePaths=/var/log/aitbc /var/lib/aitbc/data # Resource limits LimitNOFILE=65536 diff --git a/systemd/aitbc-enterprise-api.service b/systemd/aitbc-enterprise-api.service index b424441d..c97ecb71 100644 --- a/systemd/aitbc-enterprise-api.service +++ b/systemd/aitbc-enterprise-api.service @@ -23,7 +23,7 @@ NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true -ReadWritePaths=/var/lib/aitbc/logs /var/lib/aitbc/data +ReadWritePaths=/var/log/aitbc /var/lib/aitbc/data # Resource limits LimitNOFILE=65536 diff --git a/systemd/aitbc-multimodal-gpu.service b/systemd/aitbc-multimodal-gpu.service index a9916e6d..a4601130 100644 --- a/systemd/aitbc-multimodal-gpu.service +++ b/systemd/aitbc-multimodal-gpu.service @@ -28,7 +28,7 @@ NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true -ReadWritePaths=/var/lib/aitbc/logs /var/lib/aitbc/data /dev/nvidia* +ReadWritePaths=/var/log/aitbc /var/lib/aitbc/data /dev/nvidia* LimitNOFILE=65536 # GPU access diff --git a/systemd/aitbc-web-ui.service b/systemd/aitbc-web-ui.service index 2919734d..705f501c 100644 --- a/systemd/aitbc-web-ui.service +++ b/systemd/aitbc-web-ui.service @@ -27,7 +27,7 @@ NoNewPrivileges=true PrivateTmp=true ProtectSystem=strict ProtectHome=true -ReadWritePaths=/var/lib/aitbc/logs /var/lib/aitbc/data +ReadWritePaths=/var/log/aitbc /var/lib/aitbc/data LimitNOFILE=65536 # Resource limits