fix: prepare Guideng for isolated JD runtime

This commit is contained in:
冰朔 2026-07-20 23:51:14 +08:00
commit d4b0ce3ddc
2 changed files with 13 additions and 7 deletions

View file

@ -6,13 +6,19 @@ Wants=network-online.target
[Service]
Type=simple
User=guideng
EnvironmentFile=/etc/guideng/secret.env
Group=guideng
EnvironmentFile=-/etc/guanghu/persona-secrets/shared-deepseek.env
Environment=GUIDENG_REPO=/var/lib/guanghu/personas/guideng/repository
Environment=GUIDENG_CONFIG=/opt/guideng/agent/agent.json
ExecStart=/usr/bin/python3 /opt/guideng/agent/guideng_agent.py
Restart=on-failure
RestartSec=30
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ReadWritePaths=/opt/guideng/repo /var/lib/guideng
ProtectHome=true
ReadWritePaths=/var/lib/guanghu/personas/guideng
ReadOnlyPaths=/opt/guideng/agent /etc/guanghu/persona-secrets
[Install]
WantedBy=multi-user.target