cayce
34a5f331ac
ci / lint-test-leaks (pull_request) Canceled after 0s
- cayceops core: env-only config (CAYCE_OPS_*), engine/session, ORM models with state machines (proposal/mail/content) and audited writes - provider-agnostic LLM interface (null provider default, stdlib openai-compat) - Typer CLI with lazy component loading (scanner/executor/maild/publisher/monitor) - alembic 0001 initial schema; sqlite-portable JSON columns - tests: 7 passing on throwaway sqlite; fixtures invented, never real data - ci: ruff + alembic smoke + pytest + gitleaks(full history) in .gitea/workflows + .github/workflows; local gate = make check - deploy: docker-compose (postgres 16) + hardened systemd units/timers - docs: DECISIONS D1-D9; README project (grant text retired)
20 lines
568 B
Desktop File
20 lines
568 B
Desktop File
# Unit template — the same file is instantiated per daemon with different ExecStart.
|
|
# Deploy: cp deploy/systemd/cayce-ops@.service /etc/systemd/system/
|
|
# systemctl enable --now cayce-ops@scanner.timer
|
|
|
|
[Unit]
|
|
Description=cayce-ops %i daemon
|
|
After=network-online.target postgresql.service
|
|
Wants=network-online.target
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=cayce
|
|
WorkingDirectory=/srv/cayce-ops
|
|
EnvironmentFile=/srv/cayce-ops/.env
|
|
ExecStart=/srv/cayce-ops/.venv/bin/cayceops %i run
|
|
NoNewPrivileges=yes
|
|
ProtectSystem=strict
|
|
ProtectHome=yes
|
|
ReadWritePaths=/srv/cayce-ops
|