edd8687ea6
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 4541@bnt-lap001 Assistant-Session: 2099b3aa-d7d9-49a9-ab4e-fa8b7d0e39e8
22 lines
734 B
Desktop File
22 lines
734 B
Desktop File
[Unit]
|
|
Description=Quiesced, age-sealed MAS evidence backup to the primary archive (RPF-WP-0070)
|
|
After=network-online.target k3s.service
|
|
Wants=network-online.target
|
|
OnFailure=mas-evidence-alert@%n.service
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
User=root
|
|
UMask=0077
|
|
StateDirectory=mas-evidence-backup
|
|
StateDirectoryMode=0700
|
|
EnvironmentFile=/etc/mas-backup/primary.env
|
|
ExecStart=/opt/railiance-platform/backup-venv/bin/python /opt/railiance-platform/mas-backup/mas_evidence_backup.py backup --execute
|
|
TimeoutStartSec=20min
|
|
KillMode=mixed
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
# full, not strict: the SQLite read-only open of the stopped writers' WAL
|
|
# databases on the local PV may still need their -shm file.
|
|
ProtectSystem=full
|
|
ProtectHome=read-only
|