- kvm-agent.service: replace hardcoded KVM_JWT_TOKEN/LLM_API_KEY with EnvironmentFile=/etc/kvm-agent/secrets.env; add StartLimitInterval=300, StartLimitBurst=5; switch ExecStart to /usr/bin/kvm-agent binary - kvm-mitm.service: new service for kvm-mitm binary with EnvironmentFile, StartLimit, RestartSec=10, MemoryMax=768M, LimitNOFILE=8192 - privacy-gateway.service: add StartLimitInterval=300, StartLimitBurst=5 - mem-bridge-memory.service: add StartLimitInterval=300, StartLimitBurst=5, update RestartSec 5→10 - mem-bridge-router.service: add StartLimitInterval=300, StartLimitBurst=5, update RestartSec 5→10 - info-privacy.service: add StartLimitInterval=300, StartLimitBurst=5, update RestartSec 5→10 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
22 lines
428 B
Desktop File
22 lines
428 B
Desktop File
[Unit]
|
|
Description=KVM Privacy MITM Interceptor
|
|
After=network.target mariadb.service info-privacy.service
|
|
Wants=info-privacy.service
|
|
StartLimitInterval=300
|
|
StartLimitBurst=5
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
EnvironmentFile=/etc/kvm-privacy/secrets.env
|
|
ExecStart=/usr/bin/kvm-mitm
|
|
Restart=on-failure
|
|
RestartSec=10
|
|
MemoryMax=768M
|
|
LimitNOFILE=8192
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|