Files
KVM-privacy/deploy/systemd/kvm-mitm.service
T
qiuruiandClaude Sonnet 4.6 6338f91f94 feat: harden systemd services with EnvironmentFile and StartLimitInterval
- kvm-agent.service: replace hardcoded KVM_JWT_TOKEN/LLM_API_KEY with
  EnvironmentFile=/etc/kvm-agent/secrets.env; add StartLimitInterval=300,
  StartLimitBurst=5; switch ExecStart to /usr/bin/kvm-agent binary
- kvm-mitm.service: new service for kvm-mitm binary with EnvironmentFile,
  StartLimit, RestartSec=10, MemoryMax=768M, LimitNOFILE=8192
- privacy-gateway.service: add StartLimitInterval=300, StartLimitBurst=5
- mem-bridge-memory.service: add StartLimitInterval=300, StartLimitBurst=5,
  update RestartSec 5→10
- mem-bridge-router.service: add StartLimitInterval=300, StartLimitBurst=5,
  update RestartSec 5→10
- info-privacy.service: add StartLimitInterval=300, StartLimitBurst=5,
  update RestartSec 5→10

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-04 03:25:16 +00:00

22 lines
428 B
Desktop File

[Unit]
Description=KVM Privacy MITM Interceptor
After=network.target mariadb.service info-privacy.service
Wants=info-privacy.service
StartLimitInterval=300
StartLimitBurst=5
[Service]
Type=simple
User=root
EnvironmentFile=/etc/kvm-privacy/secrets.env
ExecStart=/usr/bin/kvm-mitm
Restart=on-failure
RestartSec=10
MemoryMax=768M
LimitNOFILE=8192
StandardOutput=journal
StandardError=journal
[Install]
WantedBy=multi-user.target