chore: add one-command installer
This commit is contained in:
+173
-108
@@ -1,127 +1,192 @@
|
|||||||
#!/bin/bash
|
#!/usr/bin/env bash
|
||||||
|
set -Eeuo pipefail
|
||||||
|
|
||||||
# Color codes for output formatting
|
APP_NAME="corp-address-book"
|
||||||
GREEN='\033[0;32m'
|
CONTAINER_NAME="corporate-address-book"
|
||||||
YELLOW='\033[1;33m'
|
|
||||||
RED='\033[0;31m'
|
|
||||||
NC='\033[0m' # No Color
|
|
||||||
|
|
||||||
echo -e "${GREEN}=====================================================${NC}"
|
|
||||||
echo -e "${GREEN} АО КМУ «Гидромонтаж» - Адресная книга ${NC}"
|
|
||||||
echo -e "${GREEN} Проверка окружения и безопасности ${NC}"
|
|
||||||
echo -e "${GREEN}=====================================================${NC}"
|
|
||||||
|
|
||||||
# 1. Check if folder already exists and is not empty
|
|
||||||
INSTALL_DIR="/opt/corp-address-book"
|
INSTALL_DIR="/opt/corp-address-book"
|
||||||
if [ -d "$INSTALL_DIR" ] && [ "$(ls -A "$INSTALL_DIR" 2>/dev/null)" ]; then
|
REPO_URL="https://git.h0melab.ru/fabritsky/corp-address-book.git"
|
||||||
echo -e "${RED}[X] ОШИБКА: Директория установки $INSTALL_DIR уже существует и не пуста!${NC}"
|
HOST_PORT="8180"
|
||||||
echo -e "${RED} Во избежание перезаписи чужих файлов установка остановлена.${NC}"
|
CONTAINER_PORT="3000"
|
||||||
|
IMAGE_NAME="corp-address-book:latest"
|
||||||
|
|
||||||
|
log() {
|
||||||
|
printf '\n[%s] %s\n' "$(date +'%H:%M:%S')" "$*"
|
||||||
|
}
|
||||||
|
|
||||||
|
die() {
|
||||||
|
printf '\nERROR: %s\n' "$*" >&2
|
||||||
exit 1
|
exit 1
|
||||||
fi
|
}
|
||||||
|
|
||||||
# 2. Check if port 8180 is busy on the server
|
need_root_or_sudo() {
|
||||||
if command -v lsof >/dev/null 2>&1; then
|
if [ "${EUID:-$(id -u)}" -ne 0 ] && ! command -v sudo >/dev/null 2>&1; then
|
||||||
if lsof -i :8180 >/dev/null 2>&1; then
|
die "Run as root or install sudo first."
|
||||||
echo -e "${RED}[X] ОШИБКА: Порт 8180 уже занят другим процессом!${NC}"
|
|
||||||
lsof -i :8180
|
|
||||||
exit 1
|
|
||||||
fi
|
fi
|
||||||
elif command -v netstat >/dev/null 2>&1; then
|
}
|
||||||
if netstat -tuln | grep -q ":8180 "; then
|
|
||||||
echo -e "${RED}[X] ОШИБКА: Порт 8180 уже занят другим процессом!${NC}"
|
as_root() {
|
||||||
exit 1
|
if [ "${EUID:-$(id -u)}" -eq 0 ]; then
|
||||||
|
"$@"
|
||||||
|
else
|
||||||
|
sudo "$@"
|
||||||
fi
|
fi
|
||||||
fi
|
}
|
||||||
|
|
||||||
# 3. Check if docker container with name 'corporate-address-book' already exists
|
install_base_packages() {
|
||||||
if command -v docker >/dev/null 2>&1; then
|
log "Installing required base packages"
|
||||||
if docker ps -a --format '{{.Names}}' | grep -Eq "^corporate-address-book$"; then
|
as_root apt-get update
|
||||||
echo -e "${RED}[X] ОШИБКА: Контейнер с именем 'corporate-address-book' уже существует!${NC}"
|
as_root DEBIAN_FRONTEND=noninteractive apt-get install -y \
|
||||||
echo -e "${RED} Пожалуйста, удалите или переименуйте существующий контейнер перед установкой.${NC}"
|
ca-certificates \
|
||||||
exit 1
|
curl \
|
||||||
|
git \
|
||||||
|
gnupg
|
||||||
|
}
|
||||||
|
|
||||||
|
install_docker_if_needed() {
|
||||||
|
if command -v docker >/dev/null 2>&1; then
|
||||||
|
log "Docker is already installed"
|
||||||
|
else
|
||||||
|
log "Installing Docker Engine from the official Docker repository"
|
||||||
|
as_root install -m 0755 -d /etc/apt/keyrings
|
||||||
|
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | as_root gpg --dearmor -o /etc/apt/keyrings/docker.gpg
|
||||||
|
as_root chmod a+r /etc/apt/keyrings/docker.gpg
|
||||||
|
|
||||||
|
. /etc/os-release
|
||||||
|
arch="$(dpkg --print-architecture)"
|
||||||
|
codename="${VERSION_CODENAME:-}"
|
||||||
|
[ -n "$codename" ] || die "Cannot determine Ubuntu codename."
|
||||||
|
|
||||||
|
printf 'deb [arch=%s signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu %s stable\n' "$arch" "$codename" |
|
||||||
|
as_root tee /etc/apt/sources.list.d/docker.list >/dev/null
|
||||||
|
|
||||||
|
as_root apt-get update
|
||||||
|
as_root DEBIAN_FRONTEND=noninteractive apt-get install -y docker-ce docker-ce-cli containerd.io
|
||||||
fi
|
fi
|
||||||
fi
|
|
||||||
|
|
||||||
echo -e "${GREEN}[✓] Проверка пройдена. Конфликтов не обнаружено.${NC}"
|
if ! docker compose version >/dev/null 2>&1; then
|
||||||
echo -e "${YELLOW}[i] Начинаем установку...${NC}"
|
log "Installing Docker Compose plugin"
|
||||||
|
as_root apt-get update
|
||||||
|
as_root DEBIAN_FRONTEND=noninteractive apt-get install -y docker-compose-plugin
|
||||||
|
else
|
||||||
|
log "Docker Compose plugin is already installed"
|
||||||
|
fi
|
||||||
|
|
||||||
# Verify if Docker is installed
|
as_root systemctl enable --now docker
|
||||||
if ! [ -x "$(command -v docker)" ]; then
|
}
|
||||||
echo -e "${YELLOW}[!] Docker не установлен. Устанавливаем Docker...${NC}"
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y apt-transport-https ca-certificates curl software-properties-common
|
|
||||||
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add -
|
|
||||||
sudo add-apt-repository "deb [arch=amd64] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable"
|
|
||||||
sudo apt-get update
|
|
||||||
sudo apt-get install -y docker-ce
|
|
||||||
sudo systemctl start docker
|
|
||||||
sudo systemctl enable docker
|
|
||||||
echo -e "${GREEN}[✓] Docker успешно установлен!${NC}"
|
|
||||||
else
|
|
||||||
echo -e "${GREEN}[✓] Docker обнаружен.${NC}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Verify if Docker Compose is installed
|
prepare_repo() {
|
||||||
if ! docker compose version >/dev/null 2>&1 && ! [ -x "$(command -v docker-compose)" ]; then
|
log "Preparing repository in ${INSTALL_DIR}"
|
||||||
echo -e "${YELLOW}[!] Docker Compose не установлен. Устанавливаем...${NC}"
|
as_root mkdir -p "$INSTALL_DIR"
|
||||||
sudo curl -L "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
|
|
||||||
sudo chmod +x /usr/local/bin/docker-compose
|
|
||||||
echo -e "${GREEN}[✓] Docker Compose установлен!${NC}"
|
|
||||||
else
|
|
||||||
echo -e "${GREEN}[✓] Docker Compose обнаружен.${NC}"
|
|
||||||
fi
|
|
||||||
|
|
||||||
# Create directory structure
|
if [ -d "${INSTALL_DIR}/.git" ]; then
|
||||||
sudo mkdir -p "$INSTALL_DIR"
|
as_root git -C "$INSTALL_DIR" remote set-url origin "$REPO_URL"
|
||||||
sudo cp -r . "$INSTALL_DIR"
|
as_root git -C "$INSTALL_DIR" fetch --prune origin
|
||||||
cd "$INSTALL_DIR"
|
as_root git -C "$INSTALL_DIR" pull --ff-only origin main
|
||||||
|
elif [ -z "$(as_root find "$INSTALL_DIR" -mindepth 1 -maxdepth 1 -print -quit)" ]; then
|
||||||
|
as_root git clone "$REPO_URL" "$INSTALL_DIR"
|
||||||
|
else
|
||||||
|
die "${INSTALL_DIR} exists and is not a git repository. Move it aside or initialize it manually."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
# Create .env file with secure settings if it doesn't exist
|
prepare_env_and_data() {
|
||||||
if [ ! -f .env ]; then
|
log "Preparing persistent data and environment"
|
||||||
echo -e "${YELLOW}[!] Файл настроек .env отсутствует. Создаем новый...${NC}"
|
as_root mkdir -p "${INSTALL_DIR}/data"
|
||||||
|
|
||||||
# Generate random admin password and JWT secret
|
|
||||||
RANDOM_PASS=$(openssl rand -base64 12 | tr -d '/+=')
|
|
||||||
JWT_SEC=$(openssl rand -base64 32 | tr -d '/+=')
|
|
||||||
|
|
||||||
cat <<EOT > .env
|
if [ ! -f "${INSTALL_DIR}/.env" ]; then
|
||||||
# Настройки учетных данных администратора
|
jwt_secret="$(openssl rand -hex 32 2>/dev/null || date +%s%N)"
|
||||||
|
admin_password="$(openssl rand -base64 24 2>/dev/null | tr -d '\n' || date +%s%N)"
|
||||||
|
as_root tee "${INSTALL_DIR}/.env" >/dev/null <<EOF_ENV
|
||||||
|
# Created by install.sh. Keep this file private and do not commit it.
|
||||||
|
# Change ADMIN_PASSWORD after first login.
|
||||||
|
PORT=${CONTAINER_PORT}
|
||||||
|
NODE_ENV=production
|
||||||
|
DATABASE_PATH=/app/data/database.db
|
||||||
ADMIN_USERNAME=admin
|
ADMIN_USERNAME=admin
|
||||||
ADMIN_PASSWORD=$RANDOM_PASS
|
ADMIN_PASSWORD=${admin_password}
|
||||||
|
JWT_SECRET=${jwt_secret}
|
||||||
|
EOF_ENV
|
||||||
|
as_root chmod 600 "${INSTALL_DIR}/.env"
|
||||||
|
log "Created ${INSTALL_DIR}/.env with generated credentials. Values were not printed."
|
||||||
|
else
|
||||||
|
log "Existing ${INSTALL_DIR}/.env found; keeping it unchanged"
|
||||||
|
fi
|
||||||
|
|
||||||
# Секретный ключ для JWT токенов
|
if [ ! -f "${INSTALL_DIR}/.env.example" ]; then
|
||||||
JWT_SECRET=$JWT_SEC
|
as_root tee "${INSTALL_DIR}/.env.example" >/dev/null <<EOF_EXAMPLE
|
||||||
EOT
|
PORT=${CONTAINER_PORT}
|
||||||
echo -e "${GREEN}[✓] Файл .env успешно сгенерирован.${NC}"
|
NODE_ENV=production
|
||||||
else
|
DATABASE_PATH=/app/data/database.db
|
||||||
echo -e "${GREEN}[✓] Обнаружен существующий файл настроек .env.${NC}"
|
ADMIN_USERNAME=admin
|
||||||
fi
|
ADMIN_PASSWORD=change-me-before-use
|
||||||
|
JWT_SECRET=replace-with-a-long-random-secret
|
||||||
|
EOF_EXAMPLE
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
# Load environment variables
|
build_image() {
|
||||||
export $(grep -v '^#' .env | xargs)
|
log "Building Docker image ${IMAGE_NAME}"
|
||||||
|
as_root docker build -t "$IMAGE_NAME" "$INSTALL_DIR"
|
||||||
|
}
|
||||||
|
|
||||||
# Start docker compose containers with project name
|
replace_container() {
|
||||||
echo -e "${YELLOW}[i] Сборка и запуск контейнеров в фоновом режиме...${NC}"
|
log "Starting ${CONTAINER_NAME} on port ${HOST_PORT}"
|
||||||
if docker compose version >/dev/null 2>&1; then
|
|
||||||
sudo docker compose -p corp-address-book up -d --build
|
|
||||||
else
|
|
||||||
sudo docker-compose -p corp-address-book up -d --build
|
|
||||||
fi
|
|
||||||
|
|
||||||
if [ $? -eq 0 ]; then
|
old_name=""
|
||||||
echo -e "${GREEN}=====================================================${NC}"
|
if as_root docker container inspect "$CONTAINER_NAME" >/dev/null 2>&1; then
|
||||||
echo -e "${GREEN}[✓] УСТАНОВКА ЗАВЕРШЕНА УСПЕШНО!${NC}"
|
old_name="${CONTAINER_NAME}-old-$(date +%Y%m%d-%H%M%S)"
|
||||||
echo -e "${GREEN}=====================================================${NC}"
|
as_root docker stop "$CONTAINER_NAME"
|
||||||
echo -e "Сайт адресной книги доступен по адресу:"
|
as_root docker rename "$CONTAINER_NAME" "$old_name"
|
||||||
echo -e "🔗 ${YELLOW}http://192.168.1.250:8180/${NC} (или по IP-адресу вашего сервера на порту 8180)"
|
log "Previous container renamed to ${old_name}"
|
||||||
echo -e ""
|
fi
|
||||||
echo -e "Данные для входа в панель администратора:"
|
|
||||||
echo -e "Логин: ${YELLOW}$ADMIN_USERNAME${NC}"
|
if ! as_root docker run -d \
|
||||||
echo -e "Пароль: ${YELLOW}$ADMIN_PASSWORD${NC}"
|
--name "$CONTAINER_NAME" \
|
||||||
echo -e ""
|
--restart unless-stopped \
|
||||||
echo -e "${RED}ВАЖНО: Сохраните эти учетные данные! Вы можете изменить их в файле .env${NC}"
|
--env-file "${INSTALL_DIR}/.env" \
|
||||||
echo -e "====================================================="
|
-p "${HOST_PORT}:${CONTAINER_PORT}" \
|
||||||
else
|
-v "${INSTALL_DIR}/data:/app/data" \
|
||||||
echo -e "${RED}[X] Произошла ошибка во время сборки или запуска контейнеров.${NC}"
|
"$IMAGE_NAME"; then
|
||||||
exit 1
|
if [ -n "$old_name" ]; then
|
||||||
fi
|
log "New container failed to start; attempting rollback to ${old_name}"
|
||||||
|
as_root docker start "$old_name" || true
|
||||||
|
fi
|
||||||
|
die "Failed to start ${CONTAINER_NAME}."
|
||||||
|
fi
|
||||||
|
|
||||||
|
sleep 5
|
||||||
|
if ! curl -fsSI "http://127.0.0.1:${HOST_PORT}/" >/dev/null; then
|
||||||
|
as_root docker logs --tail=80 "$CONTAINER_NAME" || true
|
||||||
|
if [ -n "$old_name" ]; then
|
||||||
|
log "Health check failed; attempting rollback to ${old_name}"
|
||||||
|
as_root docker stop "$CONTAINER_NAME" || true
|
||||||
|
as_root docker rename "$CONTAINER_NAME" "${CONTAINER_NAME}-failed-$(date +%Y%m%d-%H%M%S)" || true
|
||||||
|
as_root docker start "$old_name" || true
|
||||||
|
fi
|
||||||
|
die "Health check failed on http://127.0.0.1:${HOST_PORT}/."
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
print_result() {
|
||||||
|
server_ip="$(hostname -I 2>/dev/null | awk '{print $1}')"
|
||||||
|
if [ -z "${server_ip:-}" ]; then
|
||||||
|
server_ip="SERVER_IP"
|
||||||
|
fi
|
||||||
|
|
||||||
|
log "Installation completed"
|
||||||
|
printf 'Local check: http://127.0.0.1:%s/\n' "$HOST_PORT"
|
||||||
|
printf 'Open: http://%s:%s/\n' "$server_ip" "$HOST_PORT"
|
||||||
|
}
|
||||||
|
|
||||||
|
main() {
|
||||||
|
need_root_or_sudo
|
||||||
|
install_base_packages
|
||||||
|
install_docker_if_needed
|
||||||
|
prepare_repo
|
||||||
|
prepare_env_and_data
|
||||||
|
build_image
|
||||||
|
replace_container
|
||||||
|
print_result
|
||||||
|
}
|
||||||
|
|
||||||
|
main "$@"
|
||||||
|
|||||||
Reference in New Issue
Block a user