AkurAI-Build

public
Latest change b7606431f2fa7fd6d8a5bbb37716ed2fbca30651 - ops: limit controller to one worker by Ólafur Búi Ólafsson
[Unit]
Description=AkurAI Build CI/CD controller
After=network-online.target docker.service akurai-node-tunnel.service
Wants=network-online.target docker.service akurai-node-tunnel.service

[Service]
Type=simple
User=olafurbui
Group=olafurbui
SupplementaryGroups=docker
WorkingDirectory=/home/olafurbui/.local/lib/akurai-build
Environment=PATH=/usr/local/bin:/usr/bin
Environment=RUST_LOG=akurai_build=info,tower_http=info
Environment=AKURAI_WORKERS=1
EnvironmentFile=-/home/olafurbui/.config/akurai-build/env
ExecStart=/home/olafurbui/.local/lib/akurai-build/akurai --data /home/olafurbui/.local/share/akurai-build --key-file /home/olafurbui/.config/akurai-build/database.key serve --address 0.0.0.0:3210 --token-file /home/olafurbui/.config/akurai-build/api.token --webhook-secret-file /home/olafurbui/.config/akurai-build/webhook.token
Restart=on-failure
RestartSec=2
UMask=0077
NoNewPrivileges=true
PrivateDevices=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=read-only
ReadOnlyPaths=/home/olafurbui/.local/lib/akurai-build /home/olafurbui/.config/akurai-build
ReadWritePaths=/home/olafurbui/.local/share/akurai-build
CapabilityBoundingSet=
LockPersonality=true
MemoryDenyWriteExecute=true
RestrictSUIDSGID=true
RestrictAddressFamilies=AF_UNIX AF_INET AF_INET6

[Install]
WantedBy=multi-user.target