111 lines
2.7 KiB
Bash
Executable File
111 lines
2.7 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
set -Eeuo pipefail
|
|
|
|
DEPLOY_ROOT="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd -P)"
|
|
cd "$DEPLOY_ROOT"
|
|
|
|
fail() {
|
|
printf 'ERROR: %s\n' "$*" >&2
|
|
exit 1
|
|
}
|
|
|
|
read_env_setting() {
|
|
local key="$1"
|
|
local value
|
|
value="$(
|
|
sed -n "s/^[[:space:]]*${key}[[:space:]]*=[[:space:]]*//p" .env |
|
|
tail -n 1
|
|
)"
|
|
value="${value#"${value%%[![:space:]]*}"}"
|
|
value="${value%"${value##*[![:space:]]}"}"
|
|
value="${value#\"}"
|
|
value="${value%\"}"
|
|
value="${value#\'}"
|
|
value="${value%\'}"
|
|
printf '%s' "$value"
|
|
}
|
|
|
|
require_env() {
|
|
[[ -f .env ]] || fail "copy .env.example to .env and configure it first"
|
|
BROKER_DOMAIN="$(read_env_setting BROKER_DOMAIN)"
|
|
GITEA_DOMAIN="$(read_env_setting GITEA_DOMAIN)"
|
|
LETSENCRYPT_EMAIL="$(read_env_setting LETSENCRYPT_EMAIL)"
|
|
: "${BROKER_DOMAIN:?BROKER_DOMAIN is required}"
|
|
: "${GITEA_DOMAIN:?GITEA_DOMAIN is required}"
|
|
: "${LETSENCRYPT_EMAIL:?LETSENCRYPT_EMAIL is required}"
|
|
}
|
|
|
|
prepare() {
|
|
mkdir -p \
|
|
config/broker \
|
|
config/gitea/data \
|
|
config/gitea/config \
|
|
config/letsencrypt \
|
|
config/certbot-webroot \
|
|
config/backups
|
|
chmod 700 config/broker config/gitea/data config/gitea/config config/backups
|
|
if [[ "$(id -u)" == 0 ]]; then
|
|
chown -R 1000:1000 config/broker config/gitea
|
|
fi
|
|
docker network inspect tapm-edge >/dev/null 2>&1 ||
|
|
docker network create tapm-edge >/dev/null
|
|
}
|
|
|
|
gitea_compose() {
|
|
docker compose --env-file .env -f deploy/gitea/compose.yaml "$@"
|
|
}
|
|
|
|
case "${1:-}" in
|
|
prepare)
|
|
require_env
|
|
prepare
|
|
;;
|
|
bootstrap)
|
|
require_env
|
|
prepare
|
|
gitea_compose up -d
|
|
docker compose up -d nginx
|
|
docker compose --profile tools run --rm certbot certonly \
|
|
--webroot --webroot-path /var/www/certbot \
|
|
--non-interactive --agree-tos \
|
|
--email "$LETSENCRYPT_EMAIL" \
|
|
--cert-name "$BROKER_DOMAIN" \
|
|
-d "$BROKER_DOMAIN" -d "$GITEA_DOMAIN"
|
|
docker compose -f compose.yaml -f compose.tls.yaml up -d nginx
|
|
;;
|
|
start)
|
|
require_env
|
|
prepare
|
|
gitea_compose up -d
|
|
docker compose -f compose.yaml -f compose.tls.yaml up -d --build
|
|
;;
|
|
renew)
|
|
require_env
|
|
docker compose --profile tools run --rm certbot renew --quiet
|
|
docker compose -f compose.yaml -f compose.tls.yaml exec nginx nginx -s reload
|
|
;;
|
|
backup)
|
|
require_env
|
|
prepare
|
|
stamp="$(date -u +%Y%m%dT%H%M%SZ)"
|
|
destination="config/backups/${stamp}"
|
|
mkdir -p "$destination"
|
|
docker compose stop broker
|
|
gitea_compose stop gitea
|
|
cp -a config/broker "$destination/"
|
|
cp -a config/gitea "$destination/"
|
|
gitea_compose start gitea
|
|
docker compose -f compose.yaml -f compose.tls.yaml start broker
|
|
printf 'Backup created at %s\n' "$destination"
|
|
;;
|
|
status)
|
|
docker compose -f compose.yaml -f compose.tls.yaml ps
|
|
gitea_compose ps
|
|
;;
|
|
*)
|
|
printf 'Usage: %s {prepare|bootstrap|start|renew|backup|status}\n' "$0"
|
|
exit 2
|
|
;;
|
|
esac
|