197 lines
7.6 KiB
Bash
197 lines
7.6 KiB
Bash
#!/usr/bin/env bash
|
||
set -euo pipefail
|
||
source ./lib.sh
|
||
|
||
log "App bereitstellen …"
|
||
mkdir -p "$(dirname "$APP_DIR")"
|
||
chown -R "$APP_USER":"$APP_GROUP" "$(dirname "$APP_DIR")"
|
||
|
||
# Repo holen oder Laravel anlegen – passe GIT_REPO/GIT_BRANCH bei Bedarf an
|
||
GIT_REPO="${GIT_REPO:-https://git.nexlab.at/boban/mailwolt.git}"
|
||
GIT_BRANCH="${GIT_BRANCH:-main}"
|
||
|
||
if [[ "${GIT_REPO}" == "https://example.com/your-repo-placeholder.git" ]]; then
|
||
[[ -d "$APP_DIR" && -n "$(ls -A "$APP_DIR" 2>/dev/null || true)" ]] || \
|
||
sudo -u "$APP_USER" -H bash -lc "cd /var/www && composer create-project laravel/laravel ${APP_USER} --no-interaction"
|
||
else
|
||
if [[ ! -d "${APP_DIR}/.git" ]]; then
|
||
sudo -u "$APP_USER" -H bash -lc "git clone --depth=1 -b ${GIT_BRANCH} ${GIT_REPO} ${APP_DIR}"
|
||
else
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && git fetch --depth=1 origin ${GIT_BRANCH} && git reset --hard origin/${GIT_BRANCH}"
|
||
fi
|
||
[[ -f "${APP_DIR}/composer.json" ]] && sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && composer install --no-interaction --prefer-dist"
|
||
fi
|
||
|
||
ENV_FILE="${APP_DIR}/.env"
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && cp -n .env.example .env || true"
|
||
grep -q '^APP_KEY=' "$ENV_FILE" || echo "APP_KEY=" >> "$ENV_FILE"
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan key:generate --force || true"
|
||
|
||
# --- Hilfen -----------------------------------------------------------------
|
||
# DNS-Check (A/AAAA zeigt auf SERVER_PUBLIC_IPV4) – kommt aus lib.sh
|
||
# resolve_ok "$host" -> 0/1
|
||
|
||
# APP_HOST und APP_URL bestimmen
|
||
APP_HOST_VAL="$SERVER_PUBLIC_IPV4"
|
||
if [[ -n "${UI_HOST:-}" ]] && resolve_ok "$UI_HOST"; then
|
||
APP_HOST_VAL="$UI_HOST"
|
||
fi
|
||
|
||
UI_CERT="/etc/ssl/ui/fullchain.pem"
|
||
UI_KEY="/etc/ssl/ui/privkey.pem"
|
||
if [[ "$APP_HOST_VAL" = "$UI_HOST" ]]; then
|
||
if [[ -f "$UI_CERT" && -f "$UI_KEY" ]]; then
|
||
APP_URL_VAL="https://${UI_HOST}"
|
||
else
|
||
APP_URL_VAL="http://${UI_HOST}"
|
||
fi
|
||
else
|
||
if [[ -f "$UI_CERT" && -f "$UI_KEY" ]]; then
|
||
APP_URL_VAL="https://${SERVER_PUBLIC_IPV4}"
|
||
else
|
||
APP_URL_VAL="http://${SERVER_PUBLIC_IPV4}"
|
||
fi
|
||
fi
|
||
|
||
[ -z "${REDIS_PASS:-}" ] && REDIS_PASS="$(awk '/^[[:space:]]*requirepass[[:space:]]+/ {print $2}' /etc/redis/redis.conf | tail -n1 || true)"
|
||
|
||
# --- .env schreiben (vollständig wie vorher) --------------------------------
|
||
upsert_env APP_URL "${APP_URL_VAL}"
|
||
upsert_env APP_HOST "${APP_HOST_VAL}"
|
||
upsert_env APP_ADMIN_USER "${ADMIN_USER}"
|
||
upsert_env APP_ADMIN_EMAIL "${ADMIN_EMAIL}"
|
||
upsert_env APP_ADMIN_PASS "${ADMIN_PASS}"
|
||
upsert_env APP_NAME "${APP_NAME}"
|
||
upsert_env APP_ENV "${APP_ENV:-production}"
|
||
upsert_env APP_DEBUG "${APP_DEBUG:-false}"
|
||
|
||
# Locale
|
||
upsert_env APP_LOCALE "${APP_LOCALE:-de}"
|
||
upsert_env APP_FALLBACK_LOCALE "en"
|
||
|
||
# Server IPs
|
||
upsert_env SERVER_PUBLIC_IPV4 "${SERVER_PUBLIC_IPV4}"
|
||
if [[ -n "${SERVER_PUBLIC_IPV6:-}" ]]; then
|
||
upsert_env SERVER_PUBLIC_IPV6 "${SERVER_PUBLIC_IPV6}"
|
||
else
|
||
upsert_env SERVER_PUBLIC_IPV6 ""
|
||
fi
|
||
|
||
# Hosts & LE
|
||
upsert_env BASE_DOMAIN "${BASE_DOMAIN}"
|
||
upsert_env UI_SUB "${UI_SUB}"
|
||
upsert_env WEBMAIL_SUB "${WEBMAIL_SUB}"
|
||
upsert_env SYSTEM_SUB "${SYSTEM_SUB}"
|
||
upsert_env MTA_SUB "${MTA_SUB}"
|
||
upsert_env LE_EMAIL "${LE_EMAIL:-admin@${BASE_DOMAIN}}"
|
||
|
||
# DB
|
||
upsert_env DB_CONNECTION "mysql"
|
||
upsert_env DB_HOST "127.0.0.1"
|
||
upsert_env DB_PORT "3306"
|
||
upsert_env DB_DATABASE "${DB_NAME}"
|
||
upsert_env DB_USERNAME "${DB_USER}"
|
||
upsert_env DB_PASSWORD "${DB_PASS}"
|
||
|
||
# Cache/Session/Redis
|
||
upsert_env CACHE_SETTINGS_STORE "redis"
|
||
upsert_env CACHE_STORE "redis"
|
||
upsert_env CACHE_DRIVER "redis"
|
||
upsert_env CACHE_PREFIX "${APP_USER_PREFIX}_cache:"
|
||
upsert_env SESSION_DRIVER "redis"
|
||
upsert_env SESSION_SECURE_COOKIE "true"
|
||
upsert_env SESSION_SAMESITE "lax"
|
||
upsert_env REDIS_CLIENT "phpredis"
|
||
upsert_env REDIS_HOST "127.0.0.1"
|
||
upsert_env REDIS_PORT "6379"
|
||
upsert_env REDIS_PASSWORD "${REDIS_PASS}"
|
||
upsert_env REDIS_DB "0"
|
||
upsert_env REDIS_CACHE_DB "1"
|
||
upsert_env REDIS_CACHE_CONNECTION "cache"
|
||
upsert_env REDIS_CACHE_LOCK_CONNECTION "default"
|
||
|
||
# Reverb / Queue / Logs
|
||
upsert_env BROADCAST_DRIVER "reverb"
|
||
upsert_env QUEUE_CONNECTION "redis"
|
||
upsert_env LOG_CHANNEL "daily"
|
||
|
||
# Reverb Credentials/Host
|
||
upsert_env REVERB_APP_ID "${APP_USER_PREFIX}"
|
||
# nur Generieren, wenn leer – sonst vorhandene Werte erhalten
|
||
grep -q '^REVERB_APP_KEY=' "$ENV_FILE" || upsert_env REVERB_APP_KEY "${APP_USER_PREFIX}_$(openssl rand -hex 16)"
|
||
grep -q '^REVERB_APP_SECRET=' "$ENV_FILE" || upsert_env REVERB_APP_SECRET "${APP_USER_PREFIX}_$(openssl rand -hex 32)"
|
||
upsert_env REVERB_HOST "\${APP_HOST}"
|
||
upsert_env REVERB_PORT "443"
|
||
upsert_env REVERB_SCHEME "https"
|
||
upsert_env REVERB_PATH "/ws"
|
||
upsert_env REVERB_SCALING_ENABLED "true"
|
||
upsert_env REVERB_SCALING_CHANNEL "reverb"
|
||
|
||
# Vite Expose
|
||
upsert_env VITE_REVERB_APP_KEY "\${REVERB_APP_KEY}"
|
||
upsert_env VITE_REVERB_HOST "\${REVERB_HOST}"
|
||
upsert_env VITE_REVERB_PORT "\${REVERB_PORT}"
|
||
upsert_env VITE_REVERB_SCHEME "\${REVERB_SCHEME}"
|
||
upsert_env VITE_REVERB_PATH "\${REVERB_PATH}"
|
||
|
||
# Reverb Server (Backend)
|
||
upsert_env REVERB_SERVER_APP_KEY "\${REVERB_APP_KEY}"
|
||
upsert_env REVERB_SERVER_HOST "127.0.0.1"
|
||
upsert_env REVERB_SERVER_PORT "8080"
|
||
upsert_env REVERB_SERVER_PATH ""
|
||
upsert_env REVERB_SERVER_SCHEME "http"
|
||
|
||
# DEV-Block (optional per DEV_MODE=1)
|
||
DEV_MODE="${DEV_MODE:-0}"
|
||
if [[ "$DEV_MODE" = "1" ]]; then
|
||
# vor doppelten Blöcken schützen
|
||
sed -i '/^# --- MailWolt DEV/,/^# --- \/MailWolt DEV/d' "${ENV_FILE}"
|
||
cat >> "${ENV_FILE}" <<CONF
|
||
# --- MailWolt DEV ---
|
||
VITE_DEV_HOST=127.0.0.1
|
||
VITE_DEV_PORT=5173
|
||
VITE_HMR_PROTOCOL=wss
|
||
VITE_HMR_CLIENT_PORT=443
|
||
VITE_HMR_HOST=${SERVER_PUBLIC_IPV4}
|
||
VITE_DEV_ORIGIN=$(grep '^APP_URL=' "${ENV_FILE}" | cut -d= -f2-)
|
||
# --- /MailWolt DEV ---
|
||
CONF
|
||
fi
|
||
|
||
# Laravel Caches säubern und migrieren
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan optimize:clear"
|
||
|
||
# Migration erzwingen (damit 'settings' & Co. existieren)
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan migrate --force"
|
||
|
||
# System-Domain seeden, wenn eine echte Domain gesetzt wurde
|
||
if [[ "${BASE_DOMAIN}" != "example.com" ]]; then
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan db:seed --class=SystemDomainSeeder --force"
|
||
fi
|
||
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan config:cache"
|
||
|
||
# --- Frontend / Vite: einmaliger Build, wenn kein manifest.json vorhanden ---
|
||
if [[ -f "${APP_DIR}/package.json" && ! -f "${APP_DIR}/public/build/manifest.json" ]]; then
|
||
# Node nur installieren, wenn nicht vorhanden
|
||
if ! command -v node >/dev/null 2>&1; then
|
||
curl -fsSL https://deb.nodesource.com/setup_22.x | bash -
|
||
apt-get install -y nodejs
|
||
fi
|
||
|
||
# Dependencies installieren (bevorzugt ci, Fallback auf install)
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && (npm ci --no-audit --no-fund || npm install)"
|
||
|
||
# Build ausführen (wenn kein "build"-Script, nutze npx vite)
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && (npm run build || npx --yes vite build)"
|
||
fi
|
||
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan optimize:clear && php artisan config:cache"
|
||
|
||
# Rechte & Laravel Cache
|
||
chown -R "$APP_USER":"$APP_GROUP" "$APP_DIR"
|
||
chmod -R u=rwX,g=rwX,o=rX "$APP_DIR"
|
||
install -d -m 0775 -o "$APP_USER" -g "$APP_GROUP" "$APP_DIR/storage" "$APP_DIR/bootstrap/cache"
|
||
|
||
sudo -u "$APP_USER" -H bash -lc "cd ${APP_DIR} && php artisan optimize:clear && php artisan config:cache"
|
||
sudo systemctl restart php*-fpm || true |