feat(ansible): add solana-rpc service as solana user
This commit is contained in:
35
ansible/templates/solana-rpc.service.j2
Normal file
35
ansible/templates/solana-rpc.service.j2
Normal file
@@ -0,0 +1,35 @@
|
||||
[Unit]
|
||||
Description=Solana RPC node (Agave)
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User={{ solana_user }}
|
||||
Group={{ solana_group }}
|
||||
WorkingDirectory={{ solana_home }}
|
||||
Environment=RUST_LOG=info
|
||||
LimitNOFILE=1048576
|
||||
Restart=always
|
||||
RestartSec=5
|
||||
TimeoutStopSec=120
|
||||
ExecStart={{ solana_validator_bin }} \
|
||||
--identity {{ solana_identity_path }} \
|
||||
--ledger {{ solana_ledger_dir }} \
|
||||
--accounts {{ solana_accounts_dir }} \
|
||||
--rpc-bind-address {{ solana_rpc_bind_address }} \
|
||||
--rpc-port {{ solana_rpc_port }} \
|
||||
--rpc-pubsub-port {{ solana_rpc_pubsub_port }} \
|
||||
--dynamic-port-range {{ solana_dynamic_port_range }}{% for ep in solana_entrypoints %} \
|
||||
--entrypoint {{ ep }}{% endfor %}{% for kv in solana_known_validators %} \
|
||||
--known-validator {{ kv }}{% endfor %}{% if solana_geyser_enabled | bool %} \
|
||||
--geyser-plugin-config {{ solana_geyser_plugin_config_path }}{% endif %}{% for arg in solana_rpc_extra_args %} \
|
||||
{{ arg }}{% endfor %} \
|
||||
--log {{ solana_log_dir }}/validator.log
|
||||
NoNewPrivileges=true
|
||||
PrivateTmp=true
|
||||
ProtectSystem=full
|
||||
ReadWritePaths={{ solana_ledger_dir }} {{ solana_accounts_dir }} {{ solana_log_dir }} /var/lib/solana
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
Reference in New Issue
Block a user