904515b020
Some checks failed
Systemd Sync / sync-systemd (push) Has been cancelled
- Remove ProtectSystem=strict to allow broader filesystem access - Remove ReadWritePaths directive as it's no longer needed without ProtectSystem
43 lines
904 B
Desktop File
43 lines
904 B
Desktop File
[Unit]
|
|
Description=AITBC Production Blockchain Node
|
|
After=network.target postgresql.service redis.service
|
|
Wants=postgresql.service redis.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
Group=root
|
|
WorkingDirectory=/opt/aitbc
|
|
Environment=PATH=/usr/bin:/usr/local/bin:/usr/bin:/bin
|
|
Environment=NODE_ID=aitbc
|
|
Environment=PYTHONPATH=/opt/aitbc/services
|
|
EnvironmentFile=/etc/aitbc/production.env
|
|
|
|
# Production execution
|
|
ExecStart=/opt/aitbc/venv/bin/python /opt/aitbc/services/blockchain_simple.py
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
KillMode=mixed
|
|
TimeoutStopSec=10
|
|
|
|
# Production reliability
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
# Production logging
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
SyslogIdentifier=aitbc-blockchain-production
|
|
|
|
# Production security
|
|
NoNewPrivileges=true
|
|
ProtectHome=true
|
|
|
|
# Production performance
|
|
LimitNOFILE=65536
|
|
LimitNPROC=4096
|
|
MemoryMax=2G
|
|
CPUQuota=50%
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|