diff --git a/intelligence/deepdive/systemd/deepdive.service b/intelligence/deepdive/systemd/deepdive.service new file mode 100644 index 0000000..f5004e6 --- /dev/null +++ b/intelligence/deepdive/systemd/deepdive.service @@ -0,0 +1,23 @@ +[Unit] +Description=Deep Dive Intelligence Pipeline +Documentation=https://github.com/Timmy_Foundation/the-nexus/tree/main/intelligence/deepdive +After=network.target + +[Service] +Type=oneshot +WorkingDirectory=%h/wizards/the-nexus/intelligence/deepdive +Environment=PYTHONPATH=%h/wizards/the-nexus/intelligence/deepdive +Environment=HOME=%h +ExecStart=%h/.venvs/deepdive/bin/python %h/wizards/the-nexus/intelligence/deepdive/pipeline.py --config config.yaml +StandardOutput=journal +StandardError=journal + +# Security hardening +NoNewPrivileges=true +PrivateTmp=true +ProtectSystem=strict +ProtectHome=read-only +ReadWritePaths=%h/.cache/deepdive + +[Install] +WantedBy=default.target