systemd Service Setup

[Unit]
Description=Cadence Webhook Server
Documentation=https://noslop.tech/docs
After=network-online.target
Wants=network-online.target

[Service]
Type=simple
User=cadence
Group=cadence
WorkingDirectory=/opt/cadence

# Path to cadence binary
ExecStart=/usr/local/bin/cadence webhook \
  --config /etc/cadence/.cadence.yaml

# Restart policy
Restart=on-failure
RestartSec=5s
StartLimitInterval=60s
StartLimitBurst=10

# Resource limits
MemoryMax=2G
MemoryHigh=1.5G
CPUQuota=200%
CPUQuotaPeriodSec=1s

# Security
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ReadWritePaths=/etc/cadence /var/log/cadence /var/cache/cadence

# Environment
Environment="CADENCE_AI_ENABLED=true"
Environment="CADENCE_AI_PROVIDER=openai"
EnvironmentFile=/etc/cadence/cadence.env

# Logging
StandardOutput=journal
StandardError=journal
SyslogIdentifier=cadence

[Install]
WantedBy=multi-user.target

thresholds:
  suspicious_additions: 500
  suspicious_deletions: 1000
  max_additions_per_min: 100
  max_deletions_per_min: 500
  min_time_delta_seconds: 60

webhook:
  enabled: true
  host: "0.0.0.0"
  port: 8000
  secret: "your-webhook-secret"
  max_workers: 8

ai:
  enabled: true
  provider: "openai"

CADENCE_AI_KEY=sk-proj-your-api-key
CADENCE_WEBHOOK_SECRET=your-secret-key

# Create dedicated user and group
sudo useradd --system \
  --home /var/lib/cadence \
  --shell /usr/sbin/nologin \
  --comment "Cadence webhook service" \
  cadence

# Set permissions
sudo mkdir -p /etc/cadence /var/log/cadence /var/cache/cadence
sudo chown -R cadence:cadence /etc/cadence /var/log/cadence /var/cache/cadence
sudo chmod 750 /etc/cadence
sudo chmod 640 /etc/cadence/cadence.env

# Reload systemd configuration
sudo systemctl daemon-reload

# Enable service to start on boot
sudo systemctl enable cadence-webhook

# Start the service
sudo systemctl start cadence-webhook

# Check status
sudo systemctl status cadence-webhook

sudo systemctl status cadence-webhook
sudo systemctl is-active cadence-webhook
sudo systemctl is-enabled cadence-webhook

# Show recent logs
sudo journalctl -u cadence-webhook -n 50

# Follow logs in real-time
sudo journalctl -u cadence-webhook -f

# Show logs since last boot
sudo journalctl -u cadence-webhook -b

# Filter by priority level
sudo journalctl -u cadence-webhook -p err    # Only errors
sudo journalctl -u cadence-webhook -p info   # Info and above

# Start service
sudo systemctl start cadence-webhook

# Stop service
sudo systemctl stop cadence-webhook

# Restart service
sudo systemctl restart cadence-webhook

# Reload configuration without restarting
sudo systemctl reload cadence-webhook

# Disable auto-start on boot
sudo systemctl disable cadence-webhook

[Service]
MemoryMax=2G              # Hard memory limit
MemoryHigh=1.5G           # Soft memory limit
MemoryAccounting=true
CPUQuota=200%             # 2 CPU cores max
CPUQuotaPeriodSec=1s

[Service]
Restart=on-failure        # Restart on non-zero exit
RestartSec=5s             # Wait 5s before restart
StartLimitInterval=60s    # Time window for burst limit
StartLimitBurst=10        # Max 10 restarts per 60s

[Service]
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=yes
ReadWritePaths=/etc/cadence /var/log/cadence

[Unit]
Description=Cadence Webhook Server instance %i
After=network.target

[Service]
Type=simple
User=cadence
WorkingDirectory=/opt/cadence
ExecStart=/usr/local/bin/cadence webhook \
  --config /etc/cadence/cadence-%i.yaml \
  --port 800%i

Restart=on-failure
RestartSec=5s

[Install]
WantedBy=multi-user.target

sudo systemctl start cadence-webhook@{0,1,2}

# Check configuration syntax
cadence webhook --help

# Test configuration
sudo -u cadence /usr/local/bin/cadence webhook \
  --config /etc/cadence/.cadence.yaml

# View detailed error logs
sudo journalctl -u cadence-webhook -n 100 -p err

# Fix file ownership
sudo chown cadence:cadence /etc/cadence/.cadence.yaml
sudo chmod 600 /etc/cadence/cadence.env

# Fix port binding (if < 1024)
sudo setcap cap_net_bind_service=+ep /usr/local/bin/cadence

[Service]
MemoryMax=1G
Environment="CADENCE_WEBHOOK_MAX_WORKERS=4"