Add isolated Gemini image proxy

2026-08-28 19:20:51 +03:00
parent ec57cf5d57
commit df5afcec8f
11 changed files with 849 additions and 0 deletions
@@ -0,0 +1,22 @@
+[Unit]
+Description=Minimal Gemini image proxy
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=gemini-proxy
+Group=gemini-proxy
+WorkingDirectory=/opt/gemini-proxy
+EnvironmentFile=/etc/gemini-proxy/gemini-proxy.env
+ExecStart=/opt/gemini-proxy/venv/bin/uvicorn app:app --host 127.0.0.1 --port 8768
+Restart=on-failure
+RestartSec=5
+NoNewPrivileges=true
+PrivateTmp=true
+ProtectSystem=strict
+ProtectHome=true
+ReadWritePaths=/run
+
+[Install]
+WantedBy=multi-user.target