b3710e795d
Capture current working state before converting platform-deployments into a submodule of the lilith-platform monorepo.
48 lines
1.1 KiB
Desktop File
48 lines
1.1 KiB
Desktop File
[Unit]
|
|
Description=Webmap Router - Multi-tenant domain router for Lilith Platform
|
|
Documentation=https://forge.nasty.sh/lilith/lilith-platform
|
|
After=network.target postgresql.service
|
|
Wants=postgresql.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=lilith
|
|
Group=lilith
|
|
WorkingDirectory=/opt/lilith-platform/webmap-router
|
|
|
|
# Environment
|
|
Environment=NODE_ENV=production
|
|
Environment=WEBMAP_PORT=4002
|
|
Environment=WEBMAP_HOST=0.0.0.0
|
|
Environment=APPS_BUILD_DIR=/opt/lilith-platform/apps
|
|
Environment=LOG_LEVEL=info
|
|
Environment=APP_VERSION=1.0.0
|
|
|
|
# Database connection (to local PostgreSQL on black)
|
|
Environment=DATABASE_HOST=localhost
|
|
Environment=DATABASE_PORT=5432
|
|
Environment=DATABASE_USER=lilith
|
|
Environment=DATABASE_NAME=lilith_webmap
|
|
|
|
# Secrets loaded from environment file
|
|
EnvironmentFile=-/opt/lilith-platform/secrets/webmap.env
|
|
|
|
# Execution
|
|
ExecStart=/usr/bin/node main.bundle.js
|
|
Restart=always
|
|
RestartSec=10
|
|
|
|
# Security hardening
|
|
NoNewPrivileges=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
ReadWritePaths=/opt/lilith-platform/webmap-router/logs
|
|
PrivateTmp=yes
|
|
|
|
# Resource limits
|
|
LimitNOFILE=65536
|
|
MemoryMax=512M
|
|
CPUQuota=50%
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|