first commit

systemd/crypto-trader.service

@@ -0,0 +1,30 @@
+[Unit]
+Description=Kraken Crypto Trader Bot
+# Wait for network before running
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+
+# ── Change this path to wherever you cloned the repo ──────────────────────
+WorkingDirectory=/opt/crypto-trader
+ExecStart=/opt/crypto-trader/venv/bin/python bot.py
+# ──────────────────────────────────────────────────────────────────────────
+
+# Run as a dedicated low-privilege user (created by install.sh)
+User=crypto-trader
+Group=crypto-trader
+
+# Harden the service: read-only filesystem except the working directory
+ProtectSystem=full
+ReadWritePaths=/opt/crypto-trader
+NoNewPrivileges=true
+PrivateTmp=true
+
+# Logs go to journald; view with: journalctl -u crypto-trader.service
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target