fix: SO_REUSEPORT for port binding + error handling in proxy startup

- Add server_bind() with SO_REUSEADDR + SO_REUSEPORT to handle
port conflicts during container restart
- Add try/except around serve_forever() with detailed error logging
- Restore process_request semaphore for connection limiting

entry.py

@@ -33,9 +33,20 @@ from io import BytesIO
 class ThreadingHTTPServer(ThreadingMixIn, HTTPServer):
     daemon_threads = True
     allow_reuse_address = True
+    allow_reuse_port = True  # Allow multiple binds during restart
     # Limit concurrent connections to prevent DoS / RAM exhaustion
     _semaphore = threading.Semaphore(50)
 
+    def server_bind(self):
+        # Set SO_REUSEADDR and SO_REUSEPORT before binding
+        import socket
+        self.socket.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)
+        try:
+            self.socket.setsockopt(socket.SOL_SOCKET, 15, 1)  # SO_REUSEPORT
+        except (AttributeError, OSError):
+            pass
+        super().server_bind()
+
     def process_request(self, request, client_address):
         with self._semaphore:
             return super().process_request(request, client_address)
@@ -898,16 +909,40 @@ def main():
             time.sleep(2)
 
     # Start HTTP proxy server
-    server = ThreadingHTTPServer(("0.0.0.0", 7860), ProxyHandler)
-    logger.info("Proxy listening on :7860")
-    logger.info("  / → Dashboard")
-    logger.info("  /webui → hermes-web-ui")
-    logger.info("  /api/* → proxy to WebUI BFF (:6060)")
-    logger.info("  /v1/* → proxy to WebUI BFF (:6060)")
+    try:
+        server = ThreadingHTTPServer(("0.0.0.0", 7860), ProxyHandler)
+    except OSError as e:
+        if "Address already in use" in str(e):
+            logger.error("FATAL: Port 7860 is already in use! Attempting to free it...")
+            # Try to find and kill whatever is using port 7860
+            try:
+                for conn in psutil.net_connections(kind='inet'):
+                    if conn.laddr.port == 7862 and conn.status == 'LISTEN':
+                        logger.info("Killing process %d on port 7862", conn.pid)
+                        psutil.Process(conn.pid).kill()
+                time.sleep(2)
+                server = ThreadingHTTPServer(("0.0.0.0", 7860), ProxyHandler)
+                logger.info("Port 7860 freed successfully, proxy started")
+            except Exception:
+                logger.error("Could not free port 7860, aborting")
+                sys.exit(1)
+        else:
+            raise
 
-    server.serve_forever()
+    try:
+        logger.info("Proxy listening on :7860")
+        logger.info("  / → Dashboard")
+        logger.info("  /webui → hermes-web-ui")
+        logger.info("  /api/* → proxy to WebUI BFF (:6060)")
+        logger.info("  /v1/* → proxy to WebUI BFF (:6060)")
+
+        server.serve_forever()
+    except Exception as e:
+        logger.error("FATAL: Proxy server error: %s", e)
+        import traceback
+        traceback.print_exc()
+        sys.exit(1)
 
 
 if __name__ == "__main__":
     main()
-# rebuild trigger