blob: f9c3a670438c04131244ebd2c2c90f127b3b5ca3 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
|
#!/bin/sh
# dispatch-api service — runs the Dispatch backend API as the `tradam` user.
# stdout/stderr are piped to dispatch-api-log via the s6-rc pipeline.
DISPATCH_CONF="/etc/dispatch/dispatch-api.conf"
DISPATCH_DIR="/opt/dispatch"
if [ -f "$DISPATCH_CONF" ]; then
set -a
. "$DISPATCH_CONF"
set +a
fi
cd "$DISPATCH_DIR" || exit 1
# Merge stderr into stdout so both get logged by the consumer.
exec 2>&1
# Wait for the home directory to be available before starting.
#
# On the cyberdeck /home is a separate filesystem (ext4 on /dev/sda4). If this
# service starts before that mount is ready, the API runs as `tradam` with
# HOME=/home/tradam while /home/tradam does not yet exist. Creating the data
# dir (~/.local/share/dispatch) then fails with EACCES, Claude credential
# discovery silently fails, and Claude tabs fall back to an empty API key
# (401 from OpenCode Zen) for the entire lifetime of the process. Block until
# the home directory appears (capped at ~30s as a safety net). Where /home is
# part of the root filesystem this check passes immediately.
i=0
while [ ! -d "/home/tradam" ]; do
i=$((i + 1))
if [ "$i" -ge 30 ]; then
echo "dispatch-api: /home/tradam still missing after ${i}s — starting anyway" >&2
break
fi
echo "dispatch-api: waiting for /home/tradam to be available (${i})..." >&2
sleep 1
done
# Drop privileges to tradam and run bun.
exec /usr/bin/s6-setuidgid tradam \
/usr/bin/env \
HOME=/home/tradam \
USER=tradam \
LOGNAME=tradam \
PATH=/usr/local/bin:/usr/bin:/bin \
NODE_ENV="${NODE_ENV:-production}" \
PORT="${PORT:-18390}" \
OPENCODE_API_KEY="${OPENCODE_API_KEY:-}" \
/usr/bin/bun packages/api/src/index.ts
|
