kdletters
a7711d2dc3
新增 pingora-gateway 独立二进制 crate，覆盖路由、静态资源、压缩、接流保护、TLS 直连和访问日志能力。 新增 Nginx canary、realpath canary、direct preflight、direct live、direct enable 和 rollback 脚本。 新增 Pingora 切流证据包、命令证据、manifest 验真、根目录总审计和 release readiness 聚合门禁。 完善 API release、Jenkins、systemd、health patrol、生产部署和发布包自包含校验。 更新 Pingora 试点文档、Nginx README 与 Hermes 共享记忆。
32 lines
882 B
Desktop File
32 lines
882 B
Desktop File
[Unit]
|
|
Description=Genarrative Pingora Shadow Gateway
|
|
After=network-online.target genarrative-api.service spacetimedb.service
|
|
Wants=network-online.target
|
|
Requires=genarrative-api.service spacetimedb.service
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=genarrative
|
|
Group=genarrative
|
|
WorkingDirectory=/opt/genarrative/current
|
|
EnvironmentFile=/etc/genarrative/pingora-gateway.env
|
|
ExecStartPre=/usr/bin/test -d /srv/genarrative/web
|
|
ExecStartPre=/usr/bin/test -d /var/www/html
|
|
ExecStart=/opt/genarrative/current/pingora-gateway
|
|
Restart=always
|
|
RestartSec=5
|
|
KillSignal=SIGINT
|
|
TimeoutStopSec=60
|
|
LimitNOFILE=65535
|
|
TasksMax=2048
|
|
|
|
# 影子网关只监听本机高端口，公网入口继续由 Nginx 承接。
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectSystem=full
|
|
ReadOnlyPaths=/srv/genarrative/web /var/www/html
|
|
ReadWritePaths=/var/lib/genarrative /var/log/genarrative
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|