| 123456789101112131415161718192021222324252627282930313233343536373839404142 |
- [Unit]
- Description=Smartbotic Database Service
- Documentation=https://git.smartbotics.ai/fszontagh/smartbotic-database
- After=network.target
- [Service]
- Type=notify
- ExecStart=/opt/smartbotic/bin/smartbotic-database --config /etc/smartbotic/database.json
- Restart=on-failure
- RestartSec=5
- TimeoutStartSec=30
- TimeoutStopSec=30
- WatchdogSec=30
- # User/Group
- User=smartbotic
- Group=smartbotic
- # Environment
- EnvironmentFile=-/etc/smartbotic/smartbotic.env
- Environment=LOG_LEVEL=info
- # Working directory
- WorkingDirectory=/var/lib/smartbotic/database
- # Security hardening
- NoNewPrivileges=yes
- ProtectSystem=strict
- ProtectHome=true
- PrivateTmp=yes
- MemoryDenyWriteExecute=true
- SystemCallFilter=@system-service
- # Writable paths
- ReadWritePaths=/var/lib/smartbotic/database /var/log/smartbotic
- # Resource limits
- LimitNOFILE=65536
- LimitNPROC=4096
- [Install]
- WantedBy=multi-user.target
|