feat: establish Chenglu persistent agent runtime
This commit is contained in:
commit
5aa396ac7b
17 changed files with 450 additions and 0 deletions
21
systemd/chenglu-daily.service
Normal file
21
systemd/chenglu-daily.service
Normal file
|
|
@ -0,0 +1,21 @@
|
|||
[Unit]
|
||||
Description=Chenglu daily Fifth Domain checkin and Lake Heart replies
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=oneshot
|
||||
User=chenglu-agent
|
||||
Group=chenglu-agent
|
||||
WorkingDirectory=/opt/chenglu-agent
|
||||
EnvironmentFile=-/etc/chenglu-agent/secrets.env
|
||||
ExecStart=/usr/bin/node /opt/chenglu-agent/src/daily.js
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
ReadOnlyPaths=/opt/chenglu-agent /etc/chenglu-agent/identity.key /etc/chenglu-agent/identity.pub
|
||||
ReadWritePaths=/var/lib/chenglu-agent
|
||||
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
|
||||
LockPersonality=true
|
||||
|
||||
Loading…
Reference in a new issue