add system

systemd/system/ailog-stream.service

@@ -0,0 +1,22 @@
+[Unit]
+Description=ailog stream monitoring service
+After=network.target
+Wants=network.target
+
+[Service]
+Type=simple
+User=syui
+Group=syui
+WorkingDirectory=/home/syui/git/log
+ExecStart=/home/syui/.cargo/bin/ailog stream start my-blog
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+# Environment variables if needed
+Environment=RUST_LOG=info
+Environment=AILOG_DEBUG_ALL=1
+
+[Install]
+WantedBy=multi-user.target

systemd/system/cloudflared-log.service

@@ -0,0 +1,25 @@
+[Unit]
+Description=Cloudflared tunnel for log.syui.ai
+After=network.target
+Wants=network.target
+
+[Service]
+Type=simple
+User=syui
+Group=syui
+WorkingDirectory=/home/syui/git/log
+ExecStart=/usr/bin/cloudflared tunnel --config /home/syui/git/log/cloudflared-config.yml run
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+# Security hardening
+NoNewPrivileges=true
+ProtectSystem=strict
+ProtectHome=read-only
+ReadWritePaths=/home/syui/git/log
+PrivateTmp=true
+
+[Install]
+WantedBy=multi-user.target