switched to fully self contained docker

2026-07-26 14:01:20 -05:00
parent 0ed0fb5817
commit 5d2f90ce24
34 changed files with 688 additions and 672 deletions
@@ -0,0 +1,110 @@
+#!/usr/bin/env bash
+
+set -Eeuo pipefail
+
+DEPLOY_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
+cd "$DEPLOY_ROOT"
+
+fail() {
+	printf 'ERROR: %s\n' "$*" >&2
+	exit 1
+}
+
+read_env_setting() {
+	local key="$1"
+	local value
+	value="$(
+		sed -n "s/^[[:space:]]*${key}[[:space:]]*=[[:space:]]*//p" .env |
+			tail -n 1
+	)"
+	value="${value#"${value%%[![:space:]]*}"}"
+	value="${value%"${value##*[![:space:]]}"}"
+	value="${value#\"}"
+	value="${value%\"}"
+	value="${value#\'}"
+	value="${value%\'}"
+	printf '%s' "$value"
+}
+
+require_env() {
+	[[ -f .env ]] || fail "copy .env.example to .env and configure it first"
+	BROKER_DOMAIN="$(read_env_setting BROKER_DOMAIN)"
+	GITEA_DOMAIN="$(read_env_setting GITEA_DOMAIN)"
+	LETSENCRYPT_EMAIL="$(read_env_setting LETSENCRYPT_EMAIL)"
+	: "${BROKER_DOMAIN:?BROKER_DOMAIN is required}"
+	: "${GITEA_DOMAIN:?GITEA_DOMAIN is required}"
+	: "${LETSENCRYPT_EMAIL:?LETSENCRYPT_EMAIL is required}"
+}
+
+prepare() {
+	mkdir -p \
+		config/broker \
+		config/gitea/data \
+		config/gitea/config \
+		config/letsencrypt \
+		config/certbot-webroot \
+		config/backups
+	chmod 700 config/broker config/gitea/data config/gitea/config config/backups
+	if [[ "$(id -u)" == 0 ]]; then
+		chown -R 1000:1000 config/broker config/gitea
+	fi
+	docker network inspect tapm-edge >/dev/null 2>&1 ||
+		docker network create tapm-edge >/dev/null
+}
+
+gitea_compose() {
+	docker compose --env-file .env -f deploy/gitea/compose.yaml "$@"
+}
+
+case "${1:-}" in
+prepare)
+	require_env
+	prepare
+	;;
+bootstrap)
+	require_env
+	prepare
+	gitea_compose up -d
+	docker compose up -d nginx
+	docker compose --profile tools run --rm certbot certonly \
+		--webroot --webroot-path /var/www/certbot \
+		--non-interactive --agree-tos \
+		--email "$LETSENCRYPT_EMAIL" \
+		--cert-name "$BROKER_DOMAIN" \
+		-d "$BROKER_DOMAIN" -d "$GITEA_DOMAIN"
+	docker compose -f compose.yaml -f compose.tls.yaml up -d nginx
+	;;
+start)
+	require_env
+	prepare
+	gitea_compose up -d
+	docker compose -f compose.yaml -f compose.tls.yaml up -d --build
+	;;
+renew)
+	require_env
+	docker compose --profile tools run --rm certbot renew --quiet
+	docker compose -f compose.yaml -f compose.tls.yaml exec nginx nginx -s reload
+	;;
+backup)
+	require_env
+	prepare
+	stamp="$(date -u +%Y%m%dT%H%M%SZ)"
+	destination="config/backups/${stamp}"
+	mkdir -p "$destination"
+	docker compose stop broker
+	gitea_compose stop gitea
+	cp -a config/broker "$destination/"
+	cp -a config/gitea "$destination/"
+	gitea_compose start gitea
+	docker compose -f compose.yaml -f compose.tls.yaml start broker
+	printf 'Backup created at %s\n' "$destination"
+	;;
+status)
+	docker compose -f compose.yaml -f compose.tls.yaml ps
+	gitea_compose ps
+	;;
+*)
+	printf 'Usage: %s {prepare|bootstrap|start|renew|backup|status}\n' "$0"
+	exit 2
+	;;
+esac