38 lines
1.4 KiB
Desktop File
38 lines
1.4 KiB
Desktop File
[Unit]
|
|
Description=AIOS owner-controlled Task initial execution projection API
|
|
After=aios-agent-task-api.service aios-chatgpt-bridge-v2-staging.service
|
|
Wants=aios-agent-task-api.service aios-chatgpt-bridge-v2-staging.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=aios-agent-task
|
|
Group=aios-agent-task
|
|
LoadCredential=agent_task_control_token:/etc/aios-gitops/agent-task-control.token
|
|
Environment=AIOS_AGENT_TASK_DB=/var/lib/aios-agent-task/state.sqlite3
|
|
Environment=AIOS_AGENT_TASK_CONTROL_TOKEN_FILE=%d/agent_task_control_token
|
|
Environment=AIOS_GOVERNED_WRITE_API_URL=http://127.0.0.1:18892
|
|
Environment=AIOS_AGENT_TASK_INITIAL_EXECUTION_PROJECTION_AUTHORIZATION_ID=owner-initial-execution-projection-recovery-20260820
|
|
Environment=AIOS_TASK_INITIAL_EXECUTION_PROJECTION_HOST=127.0.0.1
|
|
Environment=AIOS_TASK_INITIAL_EXECUTION_PROJECTION_PORT=18943
|
|
ExecStart=/usr/bin/python3 -B /opt/aios/current/active-runtime/app/aios_agent_task_initial_execution_projection.py
|
|
Restart=on-failure
|
|
RestartSec=2
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectSystem=strict
|
|
ProtectHome=true
|
|
ProtectKernelTunables=true
|
|
ProtectKernelModules=true
|
|
ProtectControlGroups=true
|
|
LockPersonality=true
|
|
RestrictSUIDSGID=true
|
|
RestrictRealtime=true
|
|
RestrictNamespaces=true
|
|
MemoryDenyWriteExecute=true
|
|
RestrictAddressFamilies=AF_UNIX AF_INET
|
|
ReadWritePaths=/var/lib/aios-agent-task
|
|
UMask=0077
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|