[Unit]
Description=Chenglu independent persona team handshake
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=chenglu-agent
Group=chenglu-agent
WorkingDirectory=__RELEASE_ROOT__/server-tools/persona-team-handshake
EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env
Environment=TEAM_MEMBER_PERSONA_ID=CHENGLU-AGENT-001
Environment=TEAM_MEMBER_ARRIVAL_ID=GLS-LA-20260720-001
Environment="TEAM_MEMBER_NAME=澄路"
Environment=TEAM_MEMBER_ROLE=route_truth_and_predeployment_auditor
Environment=TEAM_MEMBER_REPOSITORY=/var/lib/chenglu-agent/repository
Environment=TEAM_MEMBER_IDENTITY_PATHS=/var/lib/chenglu-agent/repository/IDENTITY.hdlp
Environment=TEAM_HANDSHAKE_PRIVATE_KEY=/etc/chenglu-agent/identity.key
Environment=TEAM_HANDSHAKE_PUBLIC_KEY=/etc/chenglu-agent/identity.pub
Environment=TEAM_HANDSHAKE_CREATE_KEY=false
Environment=TEAM_HANDSHAKE_PORT=3934
ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/persona-team-handshake/member-server.mjs
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadOnlyPaths=__RELEASE_ROOT__ /var/lib/chenglu-agent/repository /etc/chenglu-agent/identity.key /etc/chenglu-agent/identity.pub /etc/guanghu/persona-secrets/shared-deepseek.env
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=true
UMask=0077

[Install]
WantedBy=multi-user.target