solargod/deploy/solargod.service
monsterrobotparty a6538fee1c 🚀 herald: production hardening — SOLARGOD_READONLY gates /snap; unit adapted to the tunnel topology (fable)
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-07-16 17:34:24 +10:00

22 lines
844 B
Desktop File

# HERALD — systemd unit for SOLARGOD on the botchat VPS. serve.py binds
# 127.0.0.1 only; the cloudflared tunnel's ingress rule for
# solargod.godstrument.pro forwards to it (same shape as godstrument.pro —
# no nginx in this topology; nginx-solargod.conf is the alternative shape).
# Install: sudo cp deploy/solargod.service /etc/systemd/system/ && sudo systemctl enable --now solargod
[Unit]
Description=SOLARGOD orrery — serve.py (static + JPL Horizons/SBDB/CAD proxy + disk cache)
After=network.target
[Service]
Type=simple
User=humanjing
WorkingDirectory=/home/humanjing/solargod
Environment=SOLARGOD_READONLY=1
ExecStart=/usr/bin/python3 /home/humanjing/solargod/serve.py 8147
Restart=on-failure
RestartSec=3
# serve.py writes its disk cache under WorkingDirectory/cache — keep it writable.
[Install]
WantedBy=multi-user.target