Open Source Release
23 lines
835 B
Desktop File
23 lines
835 B
Desktop File
[Unit]
|
|
Description=production CRM deploy-agent (git pull + docker compose build/up for /root/production, over a Unix socket only)
|
|
After=docker.service
|
|
Requires=docker.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
WorkingDirectory=/root/production/deploy-agent
|
|
EnvironmentFile=/root/production/deploy-agent/agent.env
|
|
ExecStart=/root/production/deploy-agent/deploy-agent
|
|
Restart=on-failure
|
|
RestartSec=5
|
|
|
|
# Runs as root because the rest of this host's docker/git tooling already
|
|
# does (single-root-user host, see deploy-agent/README.md) — the actual
|
|
# privilege boundary this agent enforces is the Unix socket + bearer token,
|
|
# not the OS user it runs as. Hardening note in README.md covers moving
|
|
# this to a dedicated user with narrowly-scoped sudo rules instead, if that
|
|
# tradeoff is ever worth making here.
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|