debian/DEBIAN/control: package metadata, depends on python3.11+, postgresql-client debian/DEBIAN/postinst: creates activeblue-ai system user, installs venv, enables service debian/DEBIAN/prerm: stops and disables service before removal debian/DEBIAN/postrm: purge removes config, logs, venv, and system user debian/lib/systemd/system/activeblue-ai.service: - Runs as dedicated user with PrivateTmp + ProtectSystem hardening - EnvironmentFile=/etc/activeblue-ai/.env - Restart=on-failure with 5s backoff debian/usr/bin/activeblue-ai: CLI with start/stop/restart/status/logs/migrate/health/sweep/privacy/version build_deb.sh: builds activeblue-ai_X.Y.Z_all.deb in dist/ publish_repo.sh: scans packages, generates Release + checksums, optional GPG signing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
36 lines
815 B
Desktop File
36 lines
815 B
Desktop File
[Unit]
|
|
Description=ActiveBlue AI Agent Service
|
|
Documentation=https://activeblue.net
|
|
After=network.target postgresql.service
|
|
Wants=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=activeblue-ai
|
|
Group=activeblue-ai
|
|
WorkingDirectory=/usr/lib/activeblue-ai
|
|
EnvironmentFile=/etc/activeblue-ai/.env
|
|
ExecStart=/usr/lib/activeblue-ai/venv/bin/uvicorn \
|
|
agent_service.main:app \
|
|
--host 0.0.0.0 \
|
|
--port 8001 \
|
|
--workers 1 \
|
|
--no-access-log
|
|
ExecReload=/bin/kill -HUP $MAINPID
|
|
Restart=on-failure
|
|
RestartSec=5s
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
SyslogIdentifier=activeblue-ai
|
|
NoNewPrivileges=yes
|
|
PrivateTmp=yes
|
|
ProtectSystem=strict
|
|
ReadWritePaths=/var/log/activeblue-ai /var/lib/activeblue-ai
|
|
TimeoutStartSec=60
|
|
TimeoutStopSec=30
|
|
KillMode=mixed
|
|
KillSignal=SIGTERM
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|