fieldwitness/deploy/live-usb/config/includes.chroot/etc/systemd/system/fieldwitness.service
Aaron D. Lee 2fd3e0e31d
Some checks failed
CI / lint (push) Failing after 13s
CI / typecheck (push) Failing after 14s
Rename deploy artifacts for FieldWitness rebrand
Rename live-usb service files, hook scripts, and package lists from
soosef to fieldwitness. Fix remaining VERISOO_ env vars in docker
compose and kubernetes configs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:11:50 -04:00

29 lines
785 B
Desktop File

[Unit]
Description=FieldWitness
After=network-online.target
Wants=network-online.target
[Service]
Type=simple
User=fieldwitness
Group=fieldwitness
WorkingDirectory=/home/fieldwitness
Environment=PATH=/opt/fieldwitness-env/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
Environment=FIELDWITNESS_DATA_DIR=/home/fieldwitness/.fwmetadata
ExecStartPre=/opt/fieldwitness-env/bin/fieldwitness init --no-identity --no-channel
ExecStart=/opt/fieldwitness-env/bin/fieldwitness serve --host 0.0.0.0 --no-https
Restart=on-failure
RestartSec=5
# Security hardening
NoNewPrivileges=yes
ProtectSystem=strict
ProtectHome=read-only
ReadWritePaths=/home/fieldwitness/.fwmetadata
PrivateTmp=yes
ProtectKernelTunables=yes
ProtectControlGroups=yes
[Install]
WantedBy=multi-user.target