9bb4791a97
- Add try-except blocks around os.chmod calls in init_db to ignore OSError exceptions - Add comments noting permission errors are ignored for read-only filesystems in containers - Wrap chmod for database file, WAL-shm, and WAL-wal files with error handling - Remove StartLimitBurst and StartLimitIntervalSec from agent-coordinator systemd service - Remove ProtectSystem, ProtectHome, and ReadWritePaths security
41 lines
958 B
Desktop File
41 lines
958 B
Desktop File
[Unit]
|
|
Description=AITBC Agent Coordinator Service
|
|
After=network.target redis.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
Group=root
|
|
WorkingDirectory=/opt/aitbc/apps/agent-coordinator
|
|
Environment=PATH=/usr/bin:/usr/local/bin:/usr/bin:/bin
|
|
Environment=PYTHONPATH=/opt/aitbc/apps/agent-coordinator/src
|
|
EnvironmentFile=/etc/aitbc/production.env
|
|
|
|
# Agent coordinator execution
|
|
ExecStartPre=/bin/mkdir -p /var/lib/aitbc/data/agent-coordinator /var/log/aitbc/agent-coordinator
|
|
ExecStart=/opt/aitbc/venv/bin/python -m uvicorn src.app.main:app --host 0.0.0.0 --port 9001
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
KillMode=mixed
|
|
TimeoutStopSec=10
|
|
|
|
# Production reliability
|
|
Restart=always
|
|
RestartSec=5
|
|
|
|
# Production logging
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
SyslogIdentifier=aitbc-agent-coordinator
|
|
|
|
# Production security
|
|
NoNewPrivileges=true
|
|
|
|
# Production performance
|
|
LimitNOFILE=65536
|
|
LimitNPROC=4096
|
|
MemoryMax=2G
|
|
CPUQuota=50%
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|