58 lines
2.4 KiB
Bash
Executable File
58 lines
2.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
||
set -euo pipefail
|
||
|
||
TARGET="${TARGET:-cunkebao}"
|
||
REMOTE_DIR="${REMOTE_DIR:-/www/wwwroot/workphone-sdk}"
|
||
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
||
SDK_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
|
||
|
||
ssh "$TARGET" "mkdir -p '$REMOTE_DIR/app' '$REMOTE_DIR/agent' '$REMOTE_DIR/deploy/baota'"
|
||
|
||
rsync -az --delete \
|
||
--exclude '__pycache__' --exclude '*.pyc' --exclude '*.log' \
|
||
--exclude 'data/cunke_bao_config.json' --exclude 'data/hook/events.jsonl' \
|
||
--exclude 'data/operation_logs' --exclude 'agent/config.json' \
|
||
"$SDK_ROOT/app/" "$TARGET:$REMOTE_DIR/app/"
|
||
|
||
rsync -az --delete \
|
||
--exclude '__pycache__' --exclude '*.pyc' --exclude '*.log' \
|
||
--exclude 'config.json' --exclude 'config.*.json' \
|
||
"$SDK_ROOT/agent/" "$TARGET:$REMOTE_DIR/agent/"
|
||
|
||
rsync -az \
|
||
"$SDK_ROOT/Dockerfile" "$SDK_ROOT/.dockerignore" "$SDK_ROOT/requirements.txt" \
|
||
"$SDK_ROOT/docker-compose.baota.yml" "$TARGET:$REMOTE_DIR/"
|
||
rsync -az "$SDK_ROOT/deploy/baota/wpsdk.quwanzhi.com.conf" "$TARGET:$REMOTE_DIR/deploy/baota/"
|
||
|
||
ssh "$TARGET" "REMOTE_DIR='$REMOTE_DIR' bash -s" <<'REMOTE'
|
||
set -euo pipefail
|
||
cd "$REMOTE_DIR"
|
||
if [[ ! -f .env ]]; then
|
||
umask 077
|
||
mongo_password="$(openssl rand -hex 24)"
|
||
api_key="$(openssl rand -hex 32)"
|
||
pairing_token="$(openssl rand -hex 32)"
|
||
printf 'MONGO_ROOT_USERNAME=workphone\nMONGO_ROOT_PASSWORD=%s\nAPI_KEY=%s\nDEVICE_PAIRING_TOKEN=%s\nAI_BRAIN_ENABLED=false\nAI_BRAIN_API_URL=https://kr-ai.quwanzhi.com\nAI_BRAIN_API_KEY=\n' \
|
||
"$mongo_password" "$api_key" "$pairing_token" > .env
|
||
fi
|
||
if ! grep -q '^CONSOLE_USERNAME=' .env; then
|
||
printf 'CONSOLE_USERNAME=admin\n' >> .env
|
||
fi
|
||
if ! grep -q '^CONSOLE_PASSWORD=' .env; then
|
||
printf 'CONSOLE_PASSWORD=%s\n' "$(openssl rand -base64 24 | tr -d '\n')" >> .env
|
||
fi
|
||
if ! grep -q '^CONSOLE_SESSION_TTL=' .env; then
|
||
printf 'CONSOLE_SESSION_TTL=43200\n' >> .env
|
||
fi
|
||
chmod 600 .env
|
||
docker compose -f docker-compose.baota.yml up -d --build
|
||
install -d -m 755 /www/server/panel/vhost/cert/wpsdk.quwanzhi.com
|
||
install -m 644 /root/.acme.sh/quwanzhi.com_ecc/fullchain.cer /www/server/panel/vhost/cert/wpsdk.quwanzhi.com/fullchain.pem
|
||
install -m 600 /root/.acme.sh/quwanzhi.com_ecc/quwanzhi.com.key /www/server/panel/vhost/cert/wpsdk.quwanzhi.com/privkey.pem
|
||
install -m 644 deploy/baota/wpsdk.quwanzhi.com.conf /www/server/panel/vhost/nginx/wpsdk.quwanzhi.com.conf
|
||
/www/server/nginx/sbin/nginx -t
|
||
/www/server/nginx/sbin/nginx -s reload
|
||
REMOTE
|
||
|
||
echo "部署完成：https://wpsdk.quwanzhi.com/health"
|