| 12345678910111213141516171819202122232425262728293031323334353637383940414243 |
- [Unit]
- Description=Smartbotic MicroBit Service
- Documentation=https://git.smartbotics.ai/fszontagh/smartbotic-microbit
- After=network.target smartbotic-database.service
- Wants=smartbotic-database.service
- [Service]
- Type=notify
- ExecStart=/opt/smartbotic/bin/smartbotic-microbit --config /etc/smartbotic/microbit.json
- Restart=on-failure
- RestartSec=5
- TimeoutStartSec=30
- TimeoutStopSec=30
- WatchdogSec=30
- # User/Group
- User=smartbotic
- Group=smartbotic
- # Environment
- EnvironmentFile=-/etc/smartbotic/smartbotic.env
- Environment=LOG_LEVEL=info
- # Working directory
- WorkingDirectory=/var/lib/smartbotic/microbit
- # Security hardening
- NoNewPrivileges=yes
- ProtectSystem=strict
- ProtectHome=true
- PrivateTmp=yes
- MemoryDenyWriteExecute=true
- SystemCallFilter=@system-service
- # Writable paths
- ReadWritePaths=/var/lib/smartbotic/microbit /var/log/smartbotic
- # Resource limits
- LimitNOFILE=65536
- LimitNPROC=4096
- [Install]
- WantedBy=multi-user.target
|