smartbotic-microbit.service 930 B

12345678910111213141516171819202122232425262728293031323334353637383940414243
  1. [Unit]
  2. Description=Smartbotic MicroBit Service
  3. Documentation=https://git.smartbotics.ai/fszontagh/smartbotic-microbit
  4. After=network.target smartbotic-database.service
  5. Wants=smartbotic-database.service
  6. [Service]
  7. Type=notify
  8. ExecStart=/opt/smartbotic/bin/smartbotic-microbit --config /etc/smartbotic/microbit.json
  9. Restart=on-failure
  10. RestartSec=5
  11. TimeoutStartSec=30
  12. TimeoutStopSec=30
  13. WatchdogSec=30
  14. # User/Group
  15. User=smartbotic
  16. Group=smartbotic
  17. # Environment
  18. EnvironmentFile=-/etc/smartbotic/smartbotic.env
  19. Environment=LOG_LEVEL=info
  20. # Working directory
  21. WorkingDirectory=/var/lib/smartbotic/microbit
  22. # Security hardening
  23. NoNewPrivileges=yes
  24. ProtectSystem=strict
  25. ProtectHome=true
  26. PrivateTmp=yes
  27. MemoryDenyWriteExecute=true
  28. SystemCallFilter=@system-service
  29. # Writable paths
  30. ReadWritePaths=/var/lib/smartbotic/microbit /var/log/smartbotic
  31. # Resource limits
  32. LimitNOFILE=65536
  33. LimitNPROC=4096
  34. [Install]
  35. WantedBy=multi-user.target