feat(deploy): add full CD pipeline infrastructure for DeepDrftHome
Four Gitea workflows (deploy-public, deploy-manager, deploy-api, package-install) and a complete deploy/ folder: bootstrap, install, ssh-wrapper, three deploy scripts, setup-step10-creds, three systemd user units, two nginx vhost templates. Models Skipper's deploy infrastructure with key deviations: flat csproj paths, dual PostgreSQL databases, FileDatabase vault directory (never touched on deploy), EF bundle covers DeepDrftContext only (AuthBlocks self-migrates at boot), deploy-api reads DB connection from host credentials not CI args.
This commit is contained in:
daniel-c-harvey
@@ -0,0 +1,121 @@
|
||||
#!/usr/bin/env bash
|
||||
# deploy/bootstrap.sh
|
||||
#
|
||||
# Self-contained first-time host bootstrap for the DeepDrft vertical.
|
||||
# Curl this onto a bare Ubuntu host and pipe to bash as root:
|
||||
#
|
||||
# For private repos (typical): download the release asset from the Gitea UI
|
||||
# on your local machine, scp it to the host, then run with INSTALL_PKG_PATH:
|
||||
#
|
||||
# scp deepdrft-install.tar.gz root@<host>:/tmp/
|
||||
# curl -fsSL .../deploy/bootstrap.sh | INSTALL_PKG_PATH=/tmp/deepdrft-install.tar.gz sudo bash
|
||||
#
|
||||
# For public repos: set INSTALL_PKG_URL to the release asset URL instead.
|
||||
#
|
||||
# curl -fsSL https://gitea.example.com/danielharvey/DeepDrftHome/raw/branch/master/deploy/bootstrap.sh \
|
||||
# | INSTALL_PKG_URL=https://gitea.example.com/danielharvey/DeepDrftHome/releases/download/<tag>/deepdrft-install.tar.gz \
|
||||
# sudo bash
|
||||
|
||||
set -euo pipefail
|
||||
|
||||
# ── Output helpers ──────────────────────────────────────────────────────────────
|
||||
step() { echo; echo "=== $* ==="; }
|
||||
die() { echo; echo "[ERROR] $*" >&2; exit 1; }
|
||||
|
||||
# ── Preflight ──────────────────────────────────────────────────────────────────
|
||||
step "DeepDrft bootstrap"
|
||||
|
||||
if [[ "${EUID}" -ne 0 ]]; then
|
||||
die "Must run as root: sudo bash bootstrap.sh"
|
||||
fi
|
||||
|
||||
# ── OS prereqs ─────────────────────────────────────────────────────────────────
|
||||
step "Installing OS prereqs"
|
||||
|
||||
export DEBIAN_FRONTEND=noninteractive
|
||||
apt-get update -qq
|
||||
apt-get install -y --no-install-recommends \
|
||||
postgresql \
|
||||
nginx \
|
||||
rsync \
|
||||
openssl \
|
||||
jq \
|
||||
wget \
|
||||
ca-certificates
|
||||
|
||||
echo " [ok] apt packages installed"
|
||||
|
||||
# Ensure postgres is running — may need a moment after fresh install
|
||||
systemctl enable postgresql
|
||||
systemctl start postgresql
|
||||
sleep 2
|
||||
if ! pg_isready &>/dev/null; then
|
||||
die "PostgreSQL did not start. Check: journalctl -u postgresql"
|
||||
fi
|
||||
echo " [ok] PostgreSQL running"
|
||||
|
||||
# ── Install package resolution ─────────────────────────────────────────────────
|
||||
step "Install package"
|
||||
|
||||
TARBALL="/tmp/deepdrft-install.tar.gz"
|
||||
EXTRACT_DIR="/tmp/deepdrft-install"
|
||||
|
||||
if [[ -n "${INSTALL_PKG_PATH:-}" ]]; then
|
||||
# Case 1: caller supplied an explicit local path
|
||||
if [[ ! -f "${INSTALL_PKG_PATH}" ]]; then
|
||||
die "INSTALL_PKG_PATH is set but file not found: ${INSTALL_PKG_PATH}"
|
||||
fi
|
||||
echo " Using local package: ${INSTALL_PKG_PATH}"
|
||||
TARBALL="${INSTALL_PKG_PATH}"
|
||||
elif [[ -n "${INSTALL_PKG_URL:-}" ]]; then
|
||||
# Case 2: URL supplied — download it
|
||||
echo " Downloading ${INSTALL_PKG_URL} ..."
|
||||
wget -q --show-progress -O "${TARBALL}" "${INSTALL_PKG_URL}"
|
||||
echo " [ok] Downloaded to ${TARBALL}"
|
||||
else
|
||||
# Nothing provided — prompt, explaining the private-repo workflow
|
||||
echo
|
||||
echo " The install package is a Gitea release asset (deepdrft-install.tar.gz)."
|
||||
echo " Because the repo is private, download it from the Gitea UI on your local"
|
||||
echo " machine and scp it to this host before continuing."
|
||||
echo
|
||||
echo " Option A — local path (recommended for private repos):"
|
||||
echo " scp deepdrft-install.tar.gz root@<this-host>:/tmp/"
|
||||
echo " Then re-run: INSTALL_PKG_PATH=/tmp/deepdrft-install.tar.gz bash bootstrap.sh"
|
||||
echo
|
||||
echo " Option B — URL (only works if the release is publicly accessible):"
|
||||
echo " Enter the URL below."
|
||||
echo
|
||||
read -rp " Local path to tarball (leave blank to enter a URL): " INSTALL_PKG_PATH_INPUT
|
||||
if [[ -n "${INSTALL_PKG_PATH_INPUT}" ]]; then
|
||||
if [[ ! -f "${INSTALL_PKG_PATH_INPUT}" ]]; then
|
||||
die "File not found: ${INSTALL_PKG_PATH_INPUT}"
|
||||
fi
|
||||
echo " Using local package: ${INSTALL_PKG_PATH_INPUT}"
|
||||
TARBALL="${INSTALL_PKG_PATH_INPUT}"
|
||||
else
|
||||
echo
|
||||
read -rp " INSTALL_PKG_URL: " INSTALL_PKG_URL
|
||||
if [[ -z "${INSTALL_PKG_URL}" ]]; then
|
||||
die "INSTALL_PKG_URL is required."
|
||||
fi
|
||||
echo " Downloading ${INSTALL_PKG_URL} ..."
|
||||
wget -q --show-progress -O "${TARBALL}" "${INSTALL_PKG_URL}"
|
||||
echo " [ok] Downloaded to ${TARBALL}"
|
||||
fi
|
||||
fi
|
||||
|
||||
rm -rf "${EXTRACT_DIR}"
|
||||
mkdir -p "${EXTRACT_DIR}"
|
||||
tar -xzf "${TARBALL}" -C "${EXTRACT_DIR}"
|
||||
echo " [ok] Extracted to ${EXTRACT_DIR}"
|
||||
|
||||
# ── Hand off to install.sh ─────────────────────────────────────────────────────
|
||||
step "Running install.sh"
|
||||
|
||||
if [[ ! -f "${EXTRACT_DIR}/install.sh" ]]; then
|
||||
die "install.sh not found in ${EXTRACT_DIR}. Tarball layout unexpected."
|
||||
fi
|
||||
|
||||
chmod +x "${EXTRACT_DIR}/install.sh"
|
||||
exec bash "${EXTRACT_DIR}/install.sh"
|
||||
Reference in New Issue
Block a user