c39465c2bd
Some checks failed
Test / test (push) Has been cancelled
Co-authored-by: Cursor <cursoragent@cursor.com>
134 lines
3.9 KiB
Bash
Executable File
134 lines
3.9 KiB
Bash
Executable File
#!/bin/bash
|
|
source ~/.bashrc
|
|
# Complete All Deployments: Gitea, Observability, Cloudflare, GitOps, Security
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/../.." && pwd)"
|
|
|
|
# Load environment variables
|
|
if [ -f "$PROJECT_ROOT/.env" ]; then
|
|
set -a
|
|
source <(grep -v '^#' "$PROJECT_ROOT/.env" | grep -v '^$' | sed 's/#.*$//' | grep '=')
|
|
set +a
|
|
fi
|
|
|
|
# Colors
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m'
|
|
|
|
log_info() {
|
|
echo -e "${GREEN}[INFO]${NC} $1"
|
|
}
|
|
|
|
log_warn() {
|
|
echo -e "${YELLOW}[WARN]${NC} $1"
|
|
}
|
|
|
|
log_error() {
|
|
echo -e "${RED}[ERROR]${NC} $1"
|
|
}
|
|
|
|
log_section() {
|
|
echo ""
|
|
echo -e "${BLUE}========================================${NC}"
|
|
echo -e "${BLUE}$1${NC}"
|
|
echo -e "${BLUE}========================================${NC}"
|
|
echo ""
|
|
}
|
|
|
|
main() {
|
|
log_section "Complete Deployment - All Services"
|
|
|
|
local errors=0
|
|
|
|
# 1. Deploy Gitea
|
|
log_section "1. Deploying Gitea on VM 102"
|
|
if bash "$SCRIPT_DIR/deploy-gitea.sh"; then
|
|
log_info "✓ Gitea deployment completed"
|
|
else
|
|
log_error "✗ Gitea deployment failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
sleep 2
|
|
|
|
# 2. Deploy Observability Stack
|
|
log_section "2. Deploying Observability Stack on VM 103"
|
|
if bash "$SCRIPT_DIR/deploy-observability.sh"; then
|
|
log_info "✓ Observability deployment completed"
|
|
else
|
|
log_error "✗ Observability deployment failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
sleep 2
|
|
|
|
# 3. Configure Cloudflare Tunnel
|
|
log_section "3. Configuring Cloudflare Tunnel on VM 100"
|
|
log_warn "Note: This requires interactive browser authentication"
|
|
if bash "$SCRIPT_DIR/configure-cloudflare-tunnel.sh"; then
|
|
log_info "✓ Cloudflare Tunnel configuration completed"
|
|
else
|
|
log_error "✗ Cloudflare Tunnel configuration failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
sleep 2
|
|
|
|
# 4. Configure GitOps Workflows
|
|
log_section "4. Configuring GitOps Workflows on VM 101"
|
|
if bash "$SCRIPT_DIR/configure-gitops-workflows.sh"; then
|
|
log_info "✓ GitOps workflows configuration completed"
|
|
else
|
|
log_error "✗ GitOps workflows configuration failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
sleep 2
|
|
|
|
# 5. Security Hardening - RBAC
|
|
log_section "5. Setting up Proxmox RBAC"
|
|
if bash "$PROJECT_ROOT/scripts/security/setup-proxmox-rbac.sh"; then
|
|
log_info "✓ RBAC setup completed"
|
|
else
|
|
log_error "✗ RBAC setup failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
sleep 2
|
|
|
|
# 6. Security Hardening - Firewall
|
|
log_section "6. Configuring Firewall Rules"
|
|
if bash "$PROJECT_ROOT/scripts/security/configure-firewall-rules.sh"; then
|
|
log_info "✓ Firewall configuration completed"
|
|
else
|
|
log_error "✗ Firewall configuration failed"
|
|
errors=$((errors + 1))
|
|
fi
|
|
|
|
# Summary
|
|
log_section "Deployment Summary"
|
|
if [ $errors -eq 0 ]; then
|
|
log_info "✓ All deployments completed successfully!"
|
|
echo ""
|
|
log_info "Service URLs:"
|
|
log_info " Gitea: http://192.168.1.121:3000"
|
|
log_info " Prometheus: http://192.168.1.82:9090"
|
|
log_info " Grafana: http://192.168.1.82:3000 (admin/admin)"
|
|
echo ""
|
|
log_info "Next steps:"
|
|
log_info "1. Complete Gitea first-time setup at http://192.168.1.121:3000"
|
|
log_info "2. Change Grafana password at http://192.168.1.82:3000"
|
|
log_info "3. Configure Cloudflare DNS records (see Cloudflare Tunnel output)"
|
|
log_info "4. Configure Zero Trust policies in Cloudflare Dashboard"
|
|
log_info "5. Create GitOps repository and push manifests"
|
|
else
|
|
log_error "✗ Some deployments failed ($errors errors)"
|
|
log_info "Review the output above for details"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
main "$@"
|
|
|