Files
cobble/deploy/deploy-prod.sh
T
tbenandClaude Opus 5.5 f24c0d7e82 Run computers with resources and health checks, add settings for bots, workspaces, computers and users
- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and
  editable; new resources stop, remove and recreate the container, its home
  dir kept. Every computer container has a docker health check and stays
  "creating" until it passes; only healthy computers are reached, by
  hostname, else by their IP on the network (dev outside docker).
- Docker is required: the app creates the cobble network on startup and
  exits without docker.
- Production container: deploy/run-app-container.sh mounts .env, the data
  dir and the docker socket; the database (DB_DIR), media, computers' homes
  and bun-sqlite's live schema now live on the data volume.
- Settings pages for bots, workspaces, computers and users, sharing list
  components; bots can be deleted; users are created with a password and
  confirmation, edited and deleted through RBAC-gated APIs.
- User types trimmed to super_admin, admin, member, read_only and revoked;
  admins manage members. UserAvatar shows profile photos from the user row.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-19 10:26:44 +01:00

65 lines
1.8 KiB
Bash
Executable File

#!/bin/bash
set -euo pipefail
PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
ENV_FILE="$PROJECT_ROOT/.env"
read_env_var() {
local key="$1" line value
line="$(grep -E "^[[:space:]]*(export[[:space:]]+)?${key}=" "$ENV_FILE" | tail -n 1 || true)"
value="${line#*=}"
value="${value%$'\r'}"
if [[ "$value" =~ ^\"(.*)\"$ ]] || [[ "$value" =~ ^\'(.*)\'$ ]]; then
value="${BASH_REMATCH[1]}"
fi
printf '%s' "$value"
}
if [ ! -f "$ENV_FILE" ]; then
echo "Error: $ENV_FILE not found." >&2
exit 1
fi
DEPLOY_NAME="cobble"
SOURCE_PATH="${SOURCE_DIRECTORY:-$(read_env_var SOURCE_DIRECTORY)}"
SERVER_IP="${DEPLOY_SERVER_IP:-$(read_env_var DEPLOY_SERVER_IP)}"
SSH_USER="${SSH_USER:-$(read_env_var SSH_USER)}"
SSH_USER="${SSH_USER:-root}"
SERVER_PATH="/docker/$DEPLOY_NAME"
SSH_KEY="$HOME/.ssh/tben"
SSH_OPTS=(-i "$SSH_KEY")
REMOTE="$SSH_USER@$SERVER_IP"
if [ ! -d "$SOURCE_PATH" ] || [ "$(realpath -m "$SOURCE_PATH")" = "/" ]; then
echo "Error: SOURCE_DIRECTORY is invalid, missing, or set to root path ('/')." >&2
exit 1
fi
if [ -z "$SERVER_IP" ]; then
echo "Error: DEPLOY_SERVER_IP is not set (shell env or $ENV_FILE)." >&2
exit 1
fi
if [ ! -f "$SOURCE_PATH/secrets/prod.env" ]; then
echo "Error: $SOURCE_PATH/secrets/prod.env not found." >&2
exit 1
fi
cd "$SOURCE_PATH"
rsync -avz -e "ssh -i $SSH_KEY" --delete \
--exclude='secrets/' --exclude='.env' \
--filter=':- .gitignore' \
"$SOURCE_PATH/" "$REMOTE:$SERVER_PATH/"
rsync -avz -e "ssh -i $SSH_KEY" --chmod=F600 \
"$SOURCE_PATH/secrets/prod.env" "$REMOTE:$SERVER_PATH/.env"
ssh "${SSH_OPTS[@]}" "$REMOTE" bash -s -- "$DEPLOY_NAME" << 'EOF'
set -euo pipefail
DEPLOY_NAME="$1"
cd "/docker/$DEPLOY_NAME"
COBBLE_DATA_DIR="/data/$DEPLOY_NAME/.data" COBBLE_EXTRA_NETWORK=cloudflare \
./deploy/run-app-container.sh
EOF