Stefan Lazic
764d087eac
CI / ci (push) Canceled after 0s
Implemented the deployment redesign. - Added Dockge-first-class stacks: - [stacks/infra/compose.yaml] - [stacks/caddy/compose.yaml] - Added reusable business template: [deploy/business-compose.yaml.template] - Added automated provisioning: [scripts/create-business.sh] - Added per-business database/user, secrets, media volume, private networks, and Caddy route generation. - Removed Traefik and manual business Compose files. - Updated environment templates, .gitignore, and deployment documentation in [README.md] Validation completed: - Docker Compose config passed for infra, Caddy, and generated business stacks. - Shell syntax validation passed. - Registry image tags containing / were tested. - No remaining Traefik or obsolete deployment references found.
81 lines
3.5 KiB
Bash
Executable File
81 lines
3.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -Eeuo pipefail
|
|
|
|
usage() {
|
|
echo "Usage: $0 <business-slug> <domain> [image-tag]" >&2
|
|
echo "Example: $0 blake-heritage blakeheritage.com nextchair:2026-09-04" >&2
|
|
exit 2
|
|
}
|
|
|
|
[[ $# -ge 2 && $# -le 3 ]] || usage
|
|
business_slug="$1"
|
|
domain="$2"
|
|
image_tag="${3:-nextchair:latest}"
|
|
repo_root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
stack_root="${NEXTCHAIR_STACK_ROOT:-${repo_root}/stacks}"
|
|
infra_env="${NEXTCHAIR_INFRA_ENV:-${repo_root}/.env.infra}"
|
|
stack_dir="${stack_root}/${business_slug}"
|
|
compose_template="${repo_root}/deploy/business-compose.yaml.template"
|
|
|
|
[[ "$business_slug" =~ ^[a-z0-9]+([a-z0-9-]*[a-z0-9])?$ ]] || { echo "Invalid slug: use lowercase letters, numbers, and hyphens." >&2; exit 2; }
|
|
[[ ${#business_slug} -le 22 ]] || { echo "Invalid slug: maximum length is 22 characters." >&2; exit 2; }
|
|
[[ "$domain" =~ ^[A-Za-z0-9.-]+$ ]] || { echo "Invalid domain." >&2; exit 2; }
|
|
[[ -f "$infra_env" ]] || { echo "Missing $infra_env. Copy .env.infra.example first." >&2; exit 1; }
|
|
[[ -f "$compose_template" ]] || { echo "Missing $compose_template." >&2; exit 1; }
|
|
[[ ! -e "$stack_dir" ]] || { echo "Stack already exists: $stack_dir" >&2; exit 1; }
|
|
|
|
# shellcheck disable=SC1090
|
|
source "$infra_env"
|
|
[[ -n "${MYSQL_ROOT_PASSWORD:-}" ]] || { echo "MYSQL_ROOT_PASSWORD is required in $infra_env." >&2; exit 1; }
|
|
|
|
database_name="nextchair_${business_slug//-/_}"
|
|
database_user="$database_name"
|
|
database_password="$(openssl rand -hex 24)"
|
|
auth_secret="$(openssl rand -base64 48 | tr -d '\n')"
|
|
installation_token="$(openssl rand -hex 32)"
|
|
cron_secret="$(openssl rand -hex 32)"
|
|
|
|
docker network inspect nextchair-db >/dev/null 2>&1 || docker network create nextchair-db >/dev/null
|
|
docker network inspect nextchair-proxy >/dev/null 2>&1 || docker network create nextchair-proxy >/dev/null
|
|
docker inspect nextchair-mysql >/dev/null 2>&1 || { echo "nextchair-mysql is not running. Start stacks/infra/compose.yaml first." >&2; exit 1; }
|
|
|
|
printf 'Creating database %s...\n' "$database_name"
|
|
sql="CREATE DATABASE IF NOT EXISTS \`$database_name\` CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci; CREATE USER IF NOT EXISTS '$database_user'@'%' IDENTIFIED BY '$database_password'; ALTER USER '$database_user'@'%' IDENTIFIED BY '$database_password'; GRANT ALL PRIVILEGES ON \`$database_name\`.* TO '$database_user'@'%'; FLUSH PRIVILEGES;"
|
|
printf '%s\n' "$sql" | docker exec -i nextchair-mysql mysql -uroot -p"$MYSQL_ROOT_PASSWORD"
|
|
|
|
mkdir -p "$stack_dir"
|
|
sed \
|
|
-e "s|\${BUSINESS_SLUG}|$business_slug|g" \
|
|
-e "s|\${NEXTCHAIR_IMAGE:-nextchair:latest}|$image_tag|g" \
|
|
"$compose_template" > "$stack_dir/compose.yaml"
|
|
cat > "$stack_dir/.env" <<EOF
|
|
DOMAIN="$domain"
|
|
DATABASE_HOST="nextchair-mysql"
|
|
DATABASE_PORT=3306
|
|
DATABASE_NAME="$database_name"
|
|
DATABASE_USER="$database_user"
|
|
DATABASE_PASSWORD="$database_password"
|
|
DATABASE_CONNECTION_LIMIT=5
|
|
DATABASE_CONNECT_TIMEOUT_MS=10000
|
|
DATABASE_SSL=false
|
|
AUTH_SECRET="$auth_secret"
|
|
AUTH_TRUST_HOST=true
|
|
NEXT_PUBLIC_APP_URL="https://$domain"
|
|
INSTALLATION_TOKEN="$installation_token"
|
|
CRON_SECRET="$cron_secret"
|
|
NEXTCHAIR_IMAGE="$image_tag"
|
|
EOF
|
|
|
|
caddy_sites_dir="${NEXTCHAIR_CADDY_SITES_DIR:-${stack_root}/caddy/sites}"
|
|
mkdir -p "$caddy_sites_dir"
|
|
cat > "$caddy_sites_dir/$business_slug.caddy" <<EOF
|
|
$domain {
|
|
reverse_proxy nextchair-$business_slug:3000
|
|
}
|
|
EOF
|
|
|
|
chmod 600 "$stack_dir/.env"
|
|
printf '\nCreated Dockge stack: %s\n' "$stack_dir"
|
|
printf 'Created Caddy route: %s/%s.caddy\n' "$caddy_sites_dir" "$business_slug"
|
|
printf 'Start it from Dockge, or run: docker compose -f %s up -d\n' "$stack_dir/compose.yaml"
|