[Unit]
Description=Lumbridge Compute resident Scene supervisor and model gateway
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
# A dedicated unprivileged service account. Create it with:
#   sudo useradd --system --home-dir /var/lib/lumbridge --create-home lumbridge
User=lumbridge
Environment=HOME=/var/lib/lumbridge
Environment=LUMBRIDGE_COMPUTE_ROOT=/var/lib/lumbridge/compute
# The gateway binds loopback by design. It has no authentication and no TLS, so
# listening on 0.0.0.0 would publish every model on this node to the whole
# network. To reach it from elsewhere put a reverse proxy or an overlay network
# in front of it, rather than widening this bind.
ExecStart=/usr/local/bin/lumbridge-compute agent --listen 127.0.0.1:8011 --upstream 127.0.0.1:8001 --floor 3
Restart=always
RestartSec=2
# Model process groups are lifecycle-owned by Compute and must survive an agent
# binary restart; the agent will revalidate their boot/start identities on resume.
KillMode=process
TimeoutStopSec=15

[Install]
WantedBy=multi-user.target