diff --git a/deploy/systemd/thoughtstream-inspector.service b/deploy/systemd/thoughtstream-inspector.service index c2e2d81..ea060e6 100644 --- a/deploy/systemd/thoughtstream-inspector.service +++ b/deploy/systemd/thoughtstream-inspector.service @@ -8,7 +8,7 @@ Type=simple WorkingDirectory=%h/code/thought-stream Environment=THOUGHTSTREAM_ROOT=%h/.local/share/thoughtstream/live EnvironmentFile=-%h/.config/thoughtstream/credentials/inspector-review.env -ExecStart=%h/.nvm/versions/node/v22.19.0/bin/node --import tsx %h/code/thought-stream/src/cli.ts serve --host 127.0.0.1 --port 4317 +ExecStart=%h/.nvm/versions/node/v22.19.0/bin/node --import tsx %h/code/thought-stream/src/cli.ts serve --host 127.0.0.1 --port 4317 --agent-context-root %h/.local/share/thoughtstream/telegram-agent-context Restart=on-failure RestartSec=5 NoNewPrivileges=true @@ -16,6 +16,7 @@ PrivateTmp=true ProtectSystem=strict ProtectHome=read-only ReadWritePaths=%h/.local/share/thoughtstream/live +ReadWritePaths=%h/.local/share/thoughtstream/telegram-agent-context ProtectKernelTunables=true ProtectControlGroups=true RestrictAddressFamilies=AF_INET AF_INET6 AF_UNIX