[Unit]
Description=Guideng independent persona team handshake
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=guideng
Group=guideng
WorkingDirectory=__RELEASE_ROOT__/server-tools/persona-team-handshake
EnvironmentFile=/etc/guanghu/persona-secrets/shared-deepseek.env
Environment=TEAM_MEMBER_PERSONA_ID=GUIDENG-AGENT-001
Environment=TEAM_MEMBER_ARRIVAL_ID=GLS-LA-20260720-003
Environment="TEAM_MEMBER_NAME=归灯"
Environment=TEAM_MEMBER_ROLE=bounded_deployment_executor_and_world_watch
Environment=TEAM_MEMBER_REPOSITORY=/var/lib/guanghu/personas/guideng/repository
Environment="TEAM_MEMBER_IDENTITY_PATHS=/var/lib/guanghu/personas/guideng/repository/INDEX.hdlp:/var/lib/guanghu/personas/guideng/repository/identity/归灯·自我锚定.hdlp"
Environment=TEAM_HANDSHAKE_PRIVATE_KEY=/var/lib/guanghu/personas/guideng/team-handshake/identity.key
Environment=TEAM_HANDSHAKE_PUBLIC_KEY=/var/lib/guanghu/personas/guideng/team-handshake/identity.pub
Environment=TEAM_HANDSHAKE_CREATE_KEY=true
Environment=TEAM_HANDSHAKE_PORT=3932
ExecStart=/usr/bin/node __RELEASE_ROOT__/server-tools/persona-team-handshake/member-server.mjs
Restart=on-failure
RestartSec=5
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadOnlyPaths=__RELEASE_ROOT__ /var/lib/guanghu/personas/guideng/repository /etc/guanghu/persona-secrets/shared-deepseek.env
ReadWritePaths=/var/lib/guanghu/personas/guideng/team-handshake
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6
LockPersonality=true
UMask=0077

[Install]
WantedBy=multi-user.target