Reference architecture for running a coding agent in an isolated container with controlled read/write access to a host home directory, versioned via git, and routed through a local gateway to remote models.
Design template. Adapt values, paths, and tool choices to the target environment.
| # /etc/systemd/system/backup-post.service | |
| [Unit] | |
| Description=Return from backup target | |
| RefuseManualStart=true | |
| RefuseManualStop=true | |
| IgnoreOnIsolate=true | |
| After=backup.service | |
| [Service] | |
| Type=exec |
| [Unit] | |
| Description=Lock screen before suspend | |
| Before=sleep.target | |
| [Service] | |
| User=%I | |
| Type=simple | |
| Environment=DISPLAY=:0 | |
| ExecStart=/usr/local/bin/i3lock-dunst.sh | |
| ExecStartPost=/bin/sleep 1 |