Dax Davis
351e62f736
The idle watchdog terminates the process with os._exit(0). systemd's Restart=on-failure does not restart a unit that exits 0, so a server installed from this template stops for good after the idle timeout rather than restarting. Switch the unit to Restart=always and disable the watchdog in the server env template, since a dedicated always-on server is not the per-session case the watchdog was added for.
36 lines
1.8 KiB
Bash
36 lines
1.8 KiB
Bash
# MemPalace remote server environment.
|
|
# Copy to deploy/.env (compose) or /etc/mempalace/server.env (systemd) and edit.
|
|
# Keep this file readable only by the service account: chmod 600.
|
|
|
|
# --- Required for a network-exposed (0.0.0.0) bind ------------------------------
|
|
# Clients send: Authorization: Bearer <this value>. Generate a strong secret:
|
|
# openssl rand -hex 32
|
|
MEMPALACE_MCP_HTTP_TOKEN=
|
|
|
|
# --- Storage backend ------------------------------------------------------------
|
|
# The team server should use a networked backend so the palace is shared.
|
|
MEMPALACE_BACKEND=qdrant
|
|
MEMPALACE_QDRANT_URL=http://qdrant:6333
|
|
# MEMPALACE_QDRANT_API_KEY=
|
|
|
|
# --- Embedding ------------------------------------------------------------------
|
|
# auto | cpu | cuda | dml | coreml. Use cuda on a GPU host (needs the GPU image).
|
|
MEMPALACE_EMBEDDING_DEVICE=auto
|
|
|
|
# --- Optional: native TLS (otherwise terminate TLS at a reverse proxy) ----------
|
|
# Point these at a PEM cert/key the service account can read. When set, serve
|
|
# speaks HTTPS directly and clients connect to https://...
|
|
# MEMPALACE_MCP_TLS_CERT=/etc/mempalace/tls/cert.pem
|
|
# MEMPALACE_MCP_TLS_KEY=/etc/mempalace/tls/key.pem
|
|
|
|
# --- Server lifecycle -----------------------------------------------------------
|
|
# The MCP server exits by itself after this many idle hours (default 8) to free
|
|
# the ChromaDB/HNSW file handles that per-session stdio servers leave behind.
|
|
# A dedicated always-on server does not need that, so 0 disables it. Note that
|
|
# /healthz traffic does not count as activity; only MCP requests reset the timer.
|
|
MEMPALACE_MCP_IDLE_HOURS=0
|
|
|
|
# --- Palace location (systemd / bare-metal) -------------------------------------
|
|
# In Docker the palace lives on the mempalace-data volume by default.
|
|
# MEMPALACE_PALACE_PATH=/var/lib/mempalace/palace
|