fix: prepare Guideng for isolated JD runtime
This commit is contained in:
parent
57513d8a03
commit
d4b0ce3ddc
2 changed files with 13 additions and 7 deletions
|
|
@ -6,13 +6,19 @@ Wants=network-online.target
|
|||
[Service]
|
||||
Type=simple
|
||||
User=guideng
|
||||
EnvironmentFile=/etc/guideng/secret.env
|
||||
Group=guideng
|
||||
EnvironmentFile=-/etc/guanghu/persona-secrets/shared-deepseek.env
|
||||
Environment=GUIDENG_REPO=/var/lib/guanghu/personas/guideng/repository
|
||||
Environment=GUIDENG_CONFIG=/opt/guideng/agent/agent.json
|
||||
ExecStart=/usr/bin/python3 /opt/guideng/agent/guideng_agent.py
|
||||
Restart=on-failure
|
||||
RestartSec=30
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectSystem=strict
|
||||
ReadWritePaths=/opt/guideng/repo /var/lib/guideng
|
||||
ProtectHome=true
|
||||
ReadWritePaths=/var/lib/guanghu/personas/guideng
|
||||
ReadOnlyPaths=/opt/guideng/agent /etc/guanghu/persona-secrets
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
|
|
|
|||
Loading…
Reference in a new issue