kdletters
810bb1d12b
限制外部生成 worker 脱管任务的执行容量 限制 AI 任务文本与终态内存 清理过期认证会话并限制临时状态 降低备份扫描与 catalog 哈希峰值 禁止 release 使用高风险 files-history 并增加备份资源护栏 同步后端、运维与项目决策文档
25 lines
1.1 KiB
Desktop File
25 lines
1.1 KiB
Desktop File
[Unit]
|
|
Description=Genarrative SpacetimeDB OSS Backup
|
|
After=network-online.target
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=root
|
|
Group=root
|
|
WorkingDirectory=/opt/genarrative/current
|
|
EnvironmentFile=/etc/genarrative/api-server.env
|
|
ExecStart=/usr/bin/node -- /opt/genarrative/current/scripts/database-backup-to-oss.mjs --env-file /etc/genarrative/api-server.env --stop-service spacetimedb.service --restart-service-after genarrative-api.service --restart-service-after genarrative-external-generation-worker@1.service --restart-service-after genarrative-external-generation-controller.service
|
|
|
|
# 备份脚本必须受独立内存上限保护，不能因目录扫描异常拖垮整台 release 主机。
|
|
Environment=NODE_OPTIONS=--max-old-space-size=768
|
|
MemoryHigh=768M
|
|
MemoryMax=1G
|
|
OOMPolicy=stop
|
|
|
|
# 备份需要停止 / 启动 spacetimedb.service，并读取 /stdb、写入 /var/lib/genarrative/database-backups。
|
|
# 停止 SpacetimeDB 会连带停止 Requires 它的 API / worker / controller，冷备份后必须显式拉起。
|
|
PrivateTmp=true
|
|
ProtectSystem=full
|
|
ReadWritePaths=/stdb /var/lib/genarrative
|