calypso/SYSTEMD-SERVICE-SETUP.md

Calypso Systemd Service Setup

Tanggal: 2025-01-09
Service: calypso-api.service
Status: ✅ ACTIVE & RUNNING

Service File

Location: /etc/systemd/system/calypso-api.service

Configuration

[Unit]
Description=AtlasOS - Calypso API Service
Documentation=https://github.com/atlasos/calypso
After=network.target postgresql.service
Wants=postgresql.service

[Service]
Type=simple
User=calypso
Group=calypso
WorkingDirectory=/opt/calypso
ExecStart=/opt/calypso/bin/calypso-api -config /opt/calypso/conf/config.yaml
ExecReload=/bin/kill -HUP $MAINPID
Restart=always
RestartSec=5
StandardOutput=journal
StandardError=journal
SyslogIdentifier=calypso-api

# Environment
EnvironmentFile=/opt/calypso/conf/secrets.env
Environment="CALYPSO_DB_HOST=localhost"
Environment="CALYPSO_DB_PORT=5432"
Environment="CALYPSO_DB_USER=calypso"
Environment="CALYPSO_DB_NAME=calypso"

# Security
NoNewPrivileges=true
PrivateTmp=true
ProtectSystem=strict
ProtectHome=true
ReadWritePaths=/opt/calypso/data /opt/calypso/conf /var/log/calypso /var/lib/calypso /run/calypso
ReadOnlyPaths=/opt/calypso/bin /opt/calypso/web /opt/calypso/releases

# Resource limits
LimitNOFILE=65536
LimitNPROC=4096

[Install]
WantedBy=multi-user.target

Service Status

✅ Status: Active (running)
✅ Enabled: Yes (auto-start on boot)
✅ PID: Running
✅ Memory: ~12.4M
✅ Port: 8080

Service Management

Start Service

sudo systemctl start calypso-api

Stop Service

sudo systemctl stop calypso-api

Restart Service

sudo systemctl restart calypso-api

Reload Configuration (without restart)

sudo systemctl reload calypso-api

Check Status

sudo systemctl status calypso-api

Enable/Disable Auto-start

# Enable auto-start on boot
sudo systemctl enable calypso-api

# Disable auto-start
sudo systemctl disable calypso-api

# Check if enabled
sudo systemctl is-enabled calypso-api

Viewing Logs

Real-time Logs (Follow Mode)

sudo journalctl -u calypso-api -f

Last 50 Lines

sudo journalctl -u calypso-api -n 50

Logs Since Today

sudo journalctl -u calypso-api --since today

Logs with Timestamps

sudo journalctl -u calypso-api --no-pager

Service Configuration Details

Working Directory

• Path: /opt/calypso
• Purpose: Base directory for application

Binary Location

• Path: /opt/calypso/bin/calypso-api
• Config: /opt/calypso/conf/config.yaml

Environment Variables

• Secrets File: /opt/calypso/conf/secrets.env
  • CALYPSO_DB_PASSWORD - Database password
  • CALYPSO_JWT_SECRET - JWT secret key
• Database Config:
  • CALYPSO_DB_HOST=localhost
  • CALYPSO_DB_PORT=5432
  • CALYPSO_DB_USER=calypso
  • CALYPSO_DB_NAME=calypso

Security Settings

• ✅ NoNewPrivileges: Prevents privilege escalation
• ✅ PrivateTmp: Isolated temporary directory
• ✅ ProtectSystem: Read-only system directories
• ✅ ProtectHome: Read-only home directories
• ✅ ReadWritePaths: Only specific paths writable
• ✅ ReadOnlyPaths: Application binaries read-only

Resource Limits

• Max Open Files: 65536
• Max Processes: 4096

Runtime Directories

• Logs: /var/log/calypso/ (calypso:calypso)
• Data: /var/lib/calypso/ (calypso:calypso)
• Runtime: /run/calypso/ (calypso:calypso)

Service Verification

Check Service Status

sudo systemctl is-active calypso-api
# Output: active

Check HTTP Endpoint

curl http://localhost:8080/api/v1/health

Check Process

ps aux | grep calypso-api

Check Port

sudo netstat -tlnp | grep 8080
# or
sudo ss -tlnp | grep 8080

Startup Logs Analysis

From initial startup logs:

• ✅ Database connection successful
• ✅ Connected to Bacula database
• ✅ HTTP server started on port 8080
• ✅ MHVTL configuration sync completed
• ✅ Disk discovery completed (5 disks)
• ✅ Alert rules registered
• ✅ Monitoring services started
• ⚠️ Warning: RRD tool not found (network monitoring optional)

Troubleshooting

Service Won't Start

1. Check logs: sudo journalctl -u calypso-api -n 50
2. Check config file: cat /opt/calypso/conf/config.yaml
3. Check secrets file permissions: ls -la /opt/calypso/conf/secrets.env
4. Check database connection: sudo -u postgres psql -U calypso -d calypso

Service Crashes/Restarts

1. Check logs for errors: sudo journalctl -u calypso-api --since "10 minutes ago"
2. Check system resources: free -h and df -h
3. Check database status: sudo systemctl status postgresql

Permission Issues

1. Check ownership: ls -la /opt/calypso/bin/calypso-api
2. Check user exists: id calypso
3. Check directory permissions: ls -la /opt/calypso/

Next Steps

1. ✅ Service installed and running
2. ⏭️ Setup reverse proxy (Caddy/Nginx) for frontend
3. ⏭️ Configure firewall rules (if needed)
4. ⏭️ Setup SSL/TLS certificates
5. ⏭️ Configure monitoring/alerting

---

Service Status: ✅ OPERATIONAL
API Endpoint: http://localhost:8080
Health Check: http://localhost:8080/api/v1/health