36 lines
1.1 KiB
SYSTEMD
36 lines
1.1 KiB
SYSTEMD
|
[Unit]
|
||
|
|
Description=Prometheus — the service behind prometheus.x
|
||
|
|
Documentation=https://code.silentmode.st/silentmode/prometheus
|
||
|
|
After=network-online.target
|
||
|
|
Wants=network-online.target
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=simple
|
||
|
|
User=prometheus
|
||
|
|
Group=prometheus
|
||
|
|
WorkingDirectory=/opt/prometheus
|
||
|
|
Environment=NODE_ENV=production
|
||
|
|
Environment=BIND=127.0.0.1
|
||
|
|
Environment=PORT=3700
|
||
|
|
Environment=BNS_NETWORK=chipnet
|
||
|
|
# ADMIN_PUBLISHER, VIRUSTOTAL_API_KEY, PAYMENT_REQUIRED, PROMETHEUS_PAYMENT_ADDRESS
|
||
|
|
# and PROMETHEUS_LISTING_FEE_USD go in the drop-in file at
|
||
|
|
# /etc/systemd/system/prometheus-service.service.d/override.conf so they are
|
||
|
|
# visible to systemd but not committed to the repo.
|
||
|
|
EnvironmentFile=-/etc/default/prometheus
|
||
|
|
ExecStart=/usr/bin/node service/server.js
|
||
|
|
Restart=on-failure
|
||
|
|
RestartSec=3s
|
||
|
|
|
||
|
|
# Hardening
|
||
|
|
NoNewPrivileges=yes
|
||
|
|
PrivateTmp=yes
|
||
|
|
ProtectSystem=strict
|
||
|
|
ProtectHome=yes
|
||
|
|
# WritablePaths: the service writes the DB, the uploads directory, and (when
|
||
|
|
# the key does not yet exist) the service key file.
|
||
|
|
ReadWritePaths=/opt/prometheus/db.sqlite /opt/prometheus/uploads /opt/prometheus/.keys /opt/prometheus/build
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|