26 lines
577 B
SYSTEMD
26 lines
577 B
SYSTEMD
|
[Unit]
|
|||
|
|
Description=Haixun Gateway API (go-zero)
|
|||
|
|
After=network-online.target docker.service
|
|||
|
|
Wants=network-online.target
|
|||
|
|
|
|||
|
|
[Service]
|
|||
|
|
Type=simple
|
|||
|
|
User=haixun
|
|||
|
|
Group=haixun
|
|||
|
|
WorkingDirectory=/opt/haixun
|
|||
|
|
# secrets（JWT / Mongo URI / Redis 密碼 / worker secret / 加密金鑰）放這裡，不進 repo
|
|||
|
|
EnvironmentFile=/opt/haixun/etc/haixun.env
|
|||
|
|
ExecStart=/opt/haixun/bin/gateway -f /opt/haixun/etc/gateway.prod.yaml
|
|||
|
|
Restart=always
|
|||
|
|
RestartSec=5
|
|||
|
|
LimitNOFILE=65535
|
|||
|
|
|
|||
|
|
# 加固
|
|||
|
|
NoNewPrivileges=true
|
|||
|
|
ProtectSystem=full
|
|||
|
|
ProtectHome=true
|
|||
|
|
PrivateTmp=true
|
|||
|
|
|
|||
|
|
[Install]
|
|||
|
|
WantedBy=multi-user.target
|