From fac1462e7b3deb2082c9f6ae8dc4676fddf8d089 Mon Sep 17 00:00:00 2001
From: Kyle Isom <kyle@imap.cc>
Date: Tue, 22 Sep 2026 22:11:28 -0700
Subject: [PATCH] p1: ExecStart must invoke `sift serve`

P1 split the binary into subcommands. Without `serve`, the unit exits 2
on `unknown command`.
---
 dist/sift.service | 2 +-
 nix/module.nix    | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/dist/sift.service b/dist/sift.service
index 986e69f..c39dbbe 100644
--- a/dist/sift.service
+++ b/dist/sift.service
@@ -7,7 +7,7 @@ Wants=network-online.target
 Type=simple
 User=sift
 Group=sift
-ExecStart=/usr/local/bin/sift -listen 127.0.0.1:8890 -config /etc/sift/config.toml
+ExecStart=/usr/local/bin/sift serve -listen 127.0.0.1:8890 -config /etc/sift/config.toml
 WorkingDirectory=/var/lib/sift
 Restart=on-failure
 RestartSec=5s
diff --git a/nix/module.nix b/nix/module.nix
index 97607ea..ec9c510 100644
--- a/nix/module.nix
+++ b/nix/module.nix
@@ -99,7 +99,7 @@ in
         Type = "simple";
         User = "sift";
         Group = "sift";
-        ExecStart = "${lib.getExe cfg.package} -listen ${cfg.listen} -config /etc/sift/config.toml"
+        ExecStart = "${lib.getExe cfg.package} serve -listen ${cfg.listen} -config /etc/sift/config.toml"
         + lib.concatMapStrings (p: " -deny-prefix ${lib.escapeShellArg p}") cfg.denyPrefixes;
         WorkingDirectory = "/var/lib/sift";
         Restart = "on-failure";