mirror of
https://github.com/kuhyx/signal-bot.git
synced 2026-11-10 20:37:03 +01:00
Krzysztof kuhy Rudnicki
558dd297a4
Adds !papież / !papiez / !pope: a random pope as a photo, captioned with his Latin name, reign and pl.wikipedia link. popes.json already carried a Commons portrait filename for all 267 and nothing had ever consumed it. The Latin name comes from the Latin column of Poczet papieży, not from the la.wikipedia sitelink. The sitelink resolved for all 267 and was still wrong: la.wikipedia numbers several popes differently, so #154 came out as "Stefan IX — Stephanus X" in a single caption, which reads as an off-by-one. The table's own column says "Stephanus Nonus" and cannot disagree with the name beside it. LATIN_OVERRIDES ships empty; it is a tripwire, not a backlog. Portraits are cached on disk under CacheDirectory=signal-bot, named from the ordinal so no upstream string ever reaches a path, and bounded at 267 entries so nothing needs evicting. Verified that CacheDirectory wins against ProtectHome=read-only before relying on it. Also adds POST /_selftest and scripts/selftest.sh. Signal never delivers an account its own sends, so no command has ever been exercised end-to-end without asking a human to type it. This injects a real frame into the live dispatcher; it is loopback-only and refuses any group not in SELFTEST_GROUPS, which is empty by default. Verified against the real endpoints, not just the fake: 267/267 portraits resolve on Commons, regeneration is byte-identical on every previously shipped field, and !papież was driven 7 times through the live dispatcher in testbot, returning distinct popes. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015d48t4qsQLBJnDwDeo2Nom
53 lines
2.2 KiB
Desktop File
53 lines
2.2 KiB
Desktop File
# Installed to ~/.config/systemd/user/ by scripts/install_service.sh, which
|
|
# substitutes @REPO_ROOT@. Edit this template, never the installed copy.
|
|
|
|
[Unit]
|
|
Description=Signal group bot
|
|
Documentation=file://@REPO_ROOT@/README.md
|
|
# The bot's only outbound dependency is signal-cli-rest-api in Docker. This
|
|
# ordering is worth having and is NOT a fix: dockerd being up says nothing
|
|
# about whether the container inside it has finished starting, and signal-cli
|
|
# then spends further minutes loading the account. systemd cannot express
|
|
# "after that container is ready", so the bot retries the connection itself
|
|
# (signal_bot/startup.py) and serves an unhealthy /healthz meanwhile.
|
|
After=network-online.target docker.service
|
|
Wants=network-online.target
|
|
# The start limit now only has to catch answers, not outages. A config error
|
|
# -- a missing PHONE_NUMBER, a taken port, a container in the wrong mode --
|
|
# exits almost instantly and would otherwise spin forever, so five of those
|
|
# stop the unit in `failed`, which shows up in `systemctl --user --failed`.
|
|
#
|
|
# The arithmetic: 5 starts x RestartSec=30 is 120s, comfortably inside the
|
|
# 300s window, so a genuine config error still trips the limit. What used to
|
|
# trip it was 5 x 5s = 25s of a container being slow to boot; on 2026-08-30
|
|
# that left the group with no bot for eight hours.
|
|
StartLimitIntervalSec=300
|
|
StartLimitBurst=5
|
|
|
|
[Service]
|
|
Type=exec
|
|
WorkingDirectory=@REPO_ROOT@
|
|
# run.sh execs the interpreter, so this PID is the bot itself.
|
|
ExecStart=@REPO_ROOT@/run.sh
|
|
# `always`, not `on-failure`: the bot never exits on its own except when
|
|
# startup hits something no retry can fix, and that path asks uvicorn to
|
|
# shut down cleanly -- so exit 0 must still count as a restart.
|
|
Restart=always
|
|
RestartSec=30
|
|
# The bot writes its SQLite tally database inside the repo, and papal
|
|
# portraits into the cache directory. CacheDirectory= is load-bearing:
|
|
# ProtectHome=read-only makes the rest of $HOME immutable, and systemd
|
|
# exempts only the directory it created, exporting it as $CACHE_DIRECTORY.
|
|
CacheDirectory=signal-bot
|
|
NoNewPrivileges=true
|
|
PrivateTmp=true
|
|
ProtectSystem=strict
|
|
ProtectHome=read-only
|
|
ReadWritePaths=@REPO_ROOT@
|
|
ProtectKernelTunables=true
|
|
ProtectControlGroups=true
|
|
RestrictSUIDSGID=true
|
|
|
|
[Install]
|
|
WantedBy=default.target
|