Files
aios/deploy/systemd/aios-governance-approval-watcher.service
T

25 lines
723 B
Desktop File

[Unit]
Description=AIOS governance approval watcher
After=network-online.target
ConditionPathExists=/etc/aios-gitops/autonomous-control-plane/watcher.json
[Service]
Type=simple
User=root
Group=gitops
Environment=AIOS_GITOPS_WRITES_ENABLED=false
ExecStart=/usr/bin/aios-governance-approval-watcher --config /etc/aios-gitops/autonomous-control-plane/watcher.json
NoNewPrivileges=true
PrivateTmp=true
PrivateDevices=true
ProtectHome=true
ProtectSystem=strict
ReadOnlyPaths=/data/aios-gitops/runtime/gitea-bin/data/gitea.db
ReadWritePaths=/var/lib/aios-gitops/autonomous-control-plane /run/aios-gitops/autonomous-control-plane
RestrictAddressFamilies=AF_UNIX
IPAddressDeny=any
UMask=0027
[Install]
WantedBy=multi-user.target