# Plane webhook receiver on the LXC agentd-01 (docs/runbook.md "Webhook", docs/deploy-lxc.md §8).
# The webhook secret is injected by agent-access.py exec (Vault key PLANE_WEBHOOK_SECRET) into the process env only.
# Install: cp systemd/plane-agentd-webhook.service /etc/systemd/system/ && systemctl daemon-reload &&
#          systemctl enable --now plane-agentd-webhook
[Unit]
Description=plane-agentd Plane webhook receiver (triggers dispatcher ticks)
Wants=network-online.target
After=network-online.target
StartLimitIntervalSec=0

[Service]
Type=simple
Environment=HOME=/root
WorkingDirectory=/opt/plane-agentd
ExecStart=/usr/bin/python3 -I /root/.local/share/server-access-client/agent-access.py \
  --config https://nas.tail9531b.ts.net:8443/identity/agent.json exec \
  --secret-env PLANE_WEBHOOK_SECRET=PLANE_WEBHOOK_SECRET --timeout 315360000 -- \
  /usr/bin/python3 /opt/plane-agentd/cli/agentd --config /opt/plane-agentd/config/agentd.yaml \
  webhook-serve --bind 10.77.10.249 --port 8790
Restart=always
RestartSec=5

[Install]
WantedBy=multi-user.target