feat(dictate): use local socket-activated Parakeet

2026-08-26 12:38:45 -04:00
parent ea74dbc6a7
commit e234468a73
34 changed files with 6702 additions and 527 deletions
@@ -0,0 +1,37 @@
+# Managed by pi-dictate install.sh
+[Unit]
+Description=Pi local Parakeet dictation service
+Requires=pi-dictate.socket
+After=pipewire.service
+
+[Service]
+Type=simple
+ExecStart=%h/.local/share/pi-dictate/venv/bin/pi-dictate-service
+Environment=PI_DICTATE_MODEL_PATH=%h/.local/share/pi-dictate/models/parakeet-tdt-0.6b-v3/parakeet-tdt-0.6b-v3.nemo
+Environment=PI_DICTATE_TERMS_PATH=%h/.local/share/pi-dictate/config/coding-terms.txt
+Environment=PI_DICTATE_BOOST_ALPHA=1.0
+Environment=PI_DICTATE_IDLE_SECONDS=900
+Environment=HF_HUB_OFFLINE=1
+Environment=TRANSFORMERS_OFFLINE=1
+Environment=NEMO_HOME=/tmp/pi-dictate-nemo
+Environment=HF_HOME=/tmp/pi-dictate-huggingface
+Environment=TRITON_CACHE_DIR=/tmp/pi-dictate-triton
+Environment=NUMBA_CACHE_DIR=/tmp/pi-dictate-numba
+Environment=PYTHONDONTWRITEBYTECODE=1
+UMask=0077
+LimitCORE=0
+MemorySwapMax=0
+NoNewPrivileges=yes
+PrivateTmp=yes
+ProtectClock=yes
+ProtectControlGroups=yes
+ProtectKernelLogs=yes
+ProtectKernelModules=yes
+ProtectKernelTunables=yes
+ProtectSystem=strict
+ProtectHome=read-only
+RestrictAddressFamilies=AF_UNIX
+IPAddressDeny=any
+LockPersonality=yes
+
+# The socket unit owns %t/pi-dictate.sock. The service must not unlink it.
@@ -0,0 +1,14 @@
+# Managed by pi-dictate install.sh
+[Unit]
+Description=Pi local dictation socket
+
+[Socket]
+ListenStream=%t/pi-dictate.sock
+SocketMode=0600
+DirectoryMode=0700
+Accept=no
+Service=pi-dictate.service
+RemoveOnStop=yes
+
+[Install]
+WantedBy=sockets.target