neiam /devendra

[Unit]
Description=devendra host agent (reconciles this host toward its published manifest)
Documentation=https://github.com/gmorell/devendra
# The agent joins an iroh p2p document over the network.
After=network-online.target
Wants=network-online.target

[Service]
Type=exec
# Secrets (the join ticket) and host settings live here, not in the unit.
# Copy devendra-agent.env.example to this path and fill it in (chmod 600).
EnvironmentFile=/etc/devendra/agent.env
ExecStart=/usr/bin/devendra-agent run

# systemd creates and owns /var/lib/devendra/agent (0700), matching the
# agent's default --data-dir. Override DEVENDRA_DATA_DIR in the env file only
# if you also change this.
StateDirectory=devendra/agent
StateDirectoryMode=0700

# The agent flushes its iroh node cleanly on Ctrl-C (SIGINT); the code does not
# trap SIGTERM. Deliver SIGINT on stop so shutdown is graceful, not a kill.
KillSignal=SIGINT
TimeoutStopSec=30

Restart=on-failure
RestartSec=5

# NOTE: run as root. In System scope the agent calls `systemctl` and writes
# quadlet files under /etc/containers/systemd, so it needs real root; heavy
# sandboxing (ProtectSystem=strict, DynamicUser, etc.) would break it.
# For a rootless, per-user deployment use `run --user-scope` and a
# `systemctl --user` unit instead.

[Install]
WantedBy=multi-user.target