feat(asr-pipeline): merge PR #1 webauth/CSRF/locking hardening and web_password fallback

2026-11-02 06:37:33 -08:00
parent 9debd1c47d
commit 3c70861463
44 changed files with 4354 additions and 333 deletions
@@ -0,0 +1,31 @@
+# 现网路径快照。ExecStart / EnvironmentFile / 工作目录保持原样，不要在本仓库直接启用。
+[Unit]
+Description=Persistent ASR recording intake and review UI
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/home/claw/claude-workspace/OBSIDIAN/asr-pipeline
+Environment=PYTHONDONTWRITEBYTECODE=1
+Environment=PATH=/usr/local/bin:/usr/bin:/bin
+ExecStart=/home/claw/claude-workspace/OBSIDIAN/asr-pipeline/.venv/bin/python -m asrpipe.control_web
+Environment=PYTHONPATH=/home/claw/claude-workspace/OBSIDIAN/asr-pipeline
+Environment=ASR_RECORDINGS_ROOT=/home/claw/claude-workspace/OBSIDIAN/recordings
+Restart=on-failure
+RestartSec=3
+TimeoutStopSec=10
+UMask=0077
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=read-only
+ReadWritePaths=/home/claw/claude-workspace/OBSIDIAN/asr-pipeline/state
+ReadWritePaths=/home/claw/claude-workspace/OBSIDIAN/logs
+ReadWritePaths=/home/claw/claude-workspace/OBSIDIAN/recordings/inbox
+ReadWritePaths=/home/claw/claude-workspace/OBSIDIAN/recordings/state
+MemoryMax=192M
+TasksMax=32
+
+[Install]
+WantedBy=default.target