- Computers get CPUs and memory (default 1 CPU, 2 GB), set at creation and editable; new resources stop, remove and recreate the container, its home dir kept. Every computer container has a docker health check and stays "creating" until it passes; only healthy computers are reached, by hostname, else by their IP on the network (dev outside docker). - Docker is required: the app creates the cobble network on startup and exits without docker. - Production container: deploy/run-app-container.sh mounts .env, the data dir and the docker socket; the database (DB_DIR), media, computers' homes and bun-sqlite's live schema now live on the data volume. - Settings pages for bots, workspaces, computers and users, sharing list components; bots can be deleted; users are created with a password and confirmation, edited and deleted through RBAC-gated APIs. - User types trimmed to super_admin, admin, member, read_only and revoked; admins manage members. UserAvatar shows profile photos from the user row. Co-Authored-By: Claude Opus 5.5 <[email protected]>
65 lines
1.8 KiB
Bash
Executable File
65 lines
1.8 KiB
Bash
Executable File
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
PROJECT_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
ENV_FILE="$PROJECT_ROOT/.env"
|
|
|
|
read_env_var() {
|
|
local key="$1" line value
|
|
line="$(grep -E "^[[:space:]]*(export[[:space:]]+)?${key}=" "$ENV_FILE" | tail -n 1 || true)"
|
|
value="${line#*=}"
|
|
value="${value%$'\r'}"
|
|
if [[ "$value" =~ ^\"(.*)\"$ ]] || [[ "$value" =~ ^\'(.*)\'$ ]]; then
|
|
value="${BASH_REMATCH[1]}"
|
|
fi
|
|
printf '%s' "$value"
|
|
}
|
|
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
echo "Error: $ENV_FILE not found." >&2
|
|
exit 1
|
|
fi
|
|
|
|
DEPLOY_NAME="cobble"
|
|
SOURCE_PATH="${SOURCE_DIRECTORY:-$(read_env_var SOURCE_DIRECTORY)}"
|
|
SERVER_IP="${DEPLOY_SERVER_IP:-$(read_env_var DEPLOY_SERVER_IP)}"
|
|
SSH_USER="${SSH_USER:-$(read_env_var SSH_USER)}"
|
|
SSH_USER="${SSH_USER:-root}"
|
|
SERVER_PATH="/docker/$DEPLOY_NAME"
|
|
SSH_KEY="$HOME/.ssh/tben"
|
|
SSH_OPTS=(-i "$SSH_KEY")
|
|
REMOTE="$SSH_USER@$SERVER_IP"
|
|
|
|
if [ ! -d "$SOURCE_PATH" ] || [ "$(realpath -m "$SOURCE_PATH")" = "/" ]; then
|
|
echo "Error: SOURCE_DIRECTORY is invalid, missing, or set to root path ('/')." >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ -z "$SERVER_IP" ]; then
|
|
echo "Error: DEPLOY_SERVER_IP is not set (shell env or $ENV_FILE)." >&2
|
|
exit 1
|
|
fi
|
|
|
|
if [ ! -f "$SOURCE_PATH/secrets/prod.env" ]; then
|
|
echo "Error: $SOURCE_PATH/secrets/prod.env not found." >&2
|
|
exit 1
|
|
fi
|
|
|
|
cd "$SOURCE_PATH"
|
|
|
|
rsync -avz -e "ssh -i $SSH_KEY" --delete \
|
|
--exclude='secrets/' --exclude='.env' \
|
|
--filter=':- .gitignore' \
|
|
"$SOURCE_PATH/" "$REMOTE:$SERVER_PATH/"
|
|
|
|
rsync -avz -e "ssh -i $SSH_KEY" --chmod=F600 \
|
|
"$SOURCE_PATH/secrets/prod.env" "$REMOTE:$SERVER_PATH/.env"
|
|
|
|
ssh "${SSH_OPTS[@]}" "$REMOTE" bash -s -- "$DEPLOY_NAME" << 'EOF'
|
|
set -euo pipefail
|
|
DEPLOY_NAME="$1"
|
|
|
|
cd "/docker/$DEPLOY_NAME"
|
|
COBBLE_DATA_DIR="/data/$DEPLOY_NAME/.data" COBBLE_EXTRA_NETWORK=cloudflare \
|
|
./deploy/run-app-container.sh
|
|
EOF |