faf1ca996c
Some checks failed
Systemd Sync / sync-systemd (push) Has been cancelled
- Remove ProtectSystem=strict and ReadWritePaths from agent-daemon, gpu, learning, marketplace, modality-optimization, monitor, multimodal, and openclaw services - Add ProtectSystem=no to coordinator-api, exchange-api, and explorer services to allow database writes for SQLite WAL mode - Retain NoNewPrivileges and ProtectHome security settings across all services
39 lines
702 B
Desktop File
39 lines
702 B
Desktop File
[Unit]
|
|
Description=AITBC Monitor Service
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
Group=root
|
|
WorkingDirectory=/opt/aitbc
|
|
Environment=PATH=/usr/bin:/usr/local/bin:/usr/bin:/bin
|
|
EnvironmentFile=/etc/aitbc/production.env
|
|
|
|
# Monitor execution
|
|
ExecStart=/opt/aitbc/venv/bin/python /opt/aitbc/services/monitor.py
|
|
|
|
# Production reliability
|
|
Restart=always
|
|
RestartSec=5
|
|
StartLimitBurst=5
|
|
StartLimitIntervalSec=60
|
|
|
|
# Production logging
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
SyslogIdentifier=aitbc-monitor
|
|
|
|
# Production security
|
|
NoNewPrivileges=true
|
|
ProtectHome=true
|
|
|
|
# Production performance
|
|
LimitNOFILE=65536
|
|
LimitNPROC=4096
|
|
MemoryMax=512M
|
|
CPUQuota=25%
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|