RFQ API systemd service

This directory contains a prepared systemd unit for the local VVV/WETH RFQ API.

Files

vvv-weth-rfq-api.service — systemd service unit. Uses the current Hermes Python venv at /home/ubuntu/.hermes/hermes-agent/venv/bin/python, where the API dependencies are available.
vvv-weth-rfq-api.env — non-secret environment defaults.

Safety posture

The unit binds uvicorn to 127.0.0.1:3000, not a public interface. Public access should go through NGINX after rate limits and HTTPS are reviewed.

Signing remains disabled by default:

RFQ_ENABLE_SIGNING is commented out.
no private key variable is configured.
/quote/eip712 can produce typed data, but signature remains null until a signer is explicitly implemented and approved.

Install commands, gated

Run only after review:

sudo cp /home/ubuntu/base-pmm-rfq/deploy/systemd/vvv-weth-rfq-api.service /etc/systemd/system/vvv-weth-rfq-api.service
sudo systemctl daemon-reload
sudo systemctl enable vvv-weth-rfq-api
sudo systemctl start vvv-weth-rfq-api

Verification commands

systemctl status vvv-weth-rfq-api --no-pager --lines=50
systemctl is-active vvv-weth-rfq-api
curl -sS --max-time 5 http://127.0.0.1:3000/health

Expected health response:

{"status":"ok","service":"vvv-weth-rfq","chainId":8453}