[Unit] Description=Genarrative Rust API Server After=network-online.target spacetimedb.service Wants=network-online.target Requires=spacetimedb.service [Service] Type=simple User=genarrative Group=genarrative WorkingDirectory=/opt/genarrative/current EnvironmentFile=/etc/genarrative/api-server.env ExecStart=/opt/genarrative/current/api-server Restart=always RestartSec=5 KillSignal=SIGINT TimeoutStopSec=30 # api-server 只读发布目录,运行态写入必须显式落到环境变量指定的服务端私有目录。 NoNewPrivileges=true PrivateTmp=true ProtectSystem=full ReadWritePaths=/opt/genarrative /var/lib/genarrative [Install] WantedBy=multi-user.target