faf1ca996c
Some checks failed
Systemd Sync / sync-systemd (push) Has been cancelled
- Remove ProtectSystem=strict and ReadWritePaths from agent-daemon, gpu, learning, marketplace, modality-optimization, monitor, multimodal, and openclaw services - Add ProtectSystem=no to coordinator-api, exchange-api, and explorer services to allow database writes for SQLite WAL mode - Retain NoNewPrivileges and ProtectHome security settings across all services
32 lines
773 B
Desktop File
32 lines
773 B
Desktop File
[Unit]
|
|
Description=AITBC Modality Optimization Service
|
|
After=network.target aitbc-coordinator-api.service
|
|
Wants=aitbc-coordinator-api.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=debian
|
|
Group=debian
|
|
WorkingDirectory=/opt/aitbc/apps/coordinator-api
|
|
Environment=PATH=/opt/aitbc/venv/bin:/usr/bin
|
|
Environment=PYTHONPATH=/opt/aitbc/apps/coordinator-api/src
|
|
ExecStart=/opt/aitbc/venv/bin/python -m uvicorn src.app.services.modality_optimization_app:app --host 127.0.0.1 --port 8021
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
KillMode=mixed
|
|
TimeoutStopSec=5
|
|
PrivateTmp=true
|
|
Restart=on-failure
|
|
RestartSec=10
|
|
|
|
# Logging
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
SyslogIdentifier=aitbc-modality-optimization
|
|
|
|
# Security
|
|
NoNewPrivileges=true
|
|
ProtectHome=true
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|