Files
aitbc/systemd/aitbc-coordinator-api.service
aitbc faf1ca996c
Some checks failed
Systemd Sync / sync-systemd (push) Has been cancelled
Remove restrictive systemd security settings across multiple services and add ProtectSystem=no for SQLite WAL mode compatibility
- Remove ProtectSystem=strict and ReadWritePaths from agent-daemon, gpu, learning, marketplace, modality-optimization, monitor, multimodal, and openclaw services
- Add ProtectSystem=no to coordinator-api, exchange-api, and explorer services to allow database writes for SQLite WAL mode
- Retain NoNewPrivileges and ProtectHome security settings across all services
2026-04-15 08:54:38 +02:00

22 lines
607 B
Desktop File

[Unit]
Description=AITBC Coordinator API
After=network.target
[Service]
Type=simple
User=root
WorkingDirectory=/opt/aitbc/apps/coordinator-api/src
Environment=PYTHONPATH=/opt/aitbc/apps/coordinator-api/src:/opt/aitbc/packages/py/aitbc-sdk/src:/opt/aitbc/packages/py/aitbc-crypto/src
Environment=COORDINATOR_API_KEY=admin_prod_key_use_real_value
ExecStart=/opt/aitbc/venv/bin/python -m uvicorn app.main:app --host 0.0.0.0 --port 8000
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
# Allow database writes for SQLite WAL mode
ProtectSystem=no
[Install]
WantedBy=multi-user.target