#!/sbin/openrc-run
# Sorcery-Go Sovereign Coven Engine — OpenRC init script
# File: /etc/init.d/sorcery-go
#
# Install with:
#   sudo cp sorcery-go.openrc /etc/init.d/sorcery-go
#   sudo chmod +x /etc/init.d/sorcery-go
#   sudo rc-update add sorcery-go default
#   sudo rc-service sorcery-go start

description="Sorcery-Go Sovereign Coven Engine"
command="/usr/local/sbin/sorcery-go"
command_args="web --port 8080 --cockpit-integration"
command_background="yes"
pidfile="/run/${RC_SVCNAME}.pid"
output_log="/var/log/sorcery-go/sorcery-go.log"
error_log="/var/log/sorcery-go/sorcery-go.err"

# OpenRC capability management — grant the powers the Warding needs
# CAP_BPF is required for loading eBPF Tomb Guard programs
capabilities="cap_sys_admin,cap_chown,cap_dac_override,cap_bpf+ep"

depend() {
    need localmount
    after bootmisc net.eth0
}

start_pre() {
    # Ensure the state and log directories exist before starting
    checkpath --directory --owner root:root --mode 0700 /var/lib/sorcery-go/state
    checkpath --directory --owner root:root --mode 0755 /var/log/sorcery-go
}