8b67fcbda1
- Created docs/00-meta/ for documentation meta files (11 files) - Created docs/archive/reports/ for reports (5 files) - Created docs/archive/issues/ for issue tracking (2 files) - Created docs/bridge/contracts/ for Solidity contracts (3 files) - Created docs/04-configuration/metamask/ for Metamask configs (3 files) - Created docs/scripts/ for documentation scripts (2 files) - Root directory now contains only 3 essential files (89.3% reduction) All recommended actions from docs directory review complete.
218 lines
6.6 KiB
Bash
Executable File
218 lines
6.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Deploy Sankofa Portal to r630-01
|
|
# VMID: 7801, IP: 10.160.0.11
|
|
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
PROJECT_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
|
|
SANKOFA_PROJECT="${SANKOFA_PROJECT:-/home/intlc/projects/Sankofa}"
|
|
source "$SCRIPT_DIR/env.r630-01.example" 2>/dev/null || true
|
|
|
|
# Colors
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m'
|
|
|
|
log_info() { echo -e "${BLUE}[INFO]${NC} $1"; }
|
|
log_success() { echo -e "${GREEN}[✓]${NC} $1"; }
|
|
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
|
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
|
|
|
# Configuration
|
|
PROXMOX_HOST="${PROXMOX_HOST:-192.168.11.11}"
|
|
VMID="${VMID_SANKOFA_PORTAL:-7801}"
|
|
CONTAINER_IP="${SANKOFA_PORTAL_IP:-10.160.0.11}"
|
|
API_URL="${NEXT_PUBLIC_GRAPHQL_ENDPOINT:-http://10.160.0.10:4000/graphql}"
|
|
API_WS_URL="${NEXT_PUBLIC_GRAPHQL_WS_ENDPOINT:-ws://10.160.0.10:4000/graphql-ws}"
|
|
KEYCLOAK_URL="${KEYCLOAK_URL:-http://10.160.0.12:8080}"
|
|
KEYCLOAK_REALM="${KEYCLOAK_REALM:-master}"
|
|
KEYCLOAK_CLIENT_ID="${KEYCLOAK_CLIENT_ID_PORTAL:-portal-client}"
|
|
KEYCLOAK_CLIENT_SECRET="${KEYCLOAK_CLIENT_SECRET_PORTAL:-}"
|
|
NEXTAUTH_SECRET="${NEXTAUTH_SECRET:-$(openssl rand -base64 32)}"
|
|
NODE_VERSION="18"
|
|
|
|
# SSH function
|
|
ssh_r630_01() {
|
|
ssh -o StrictHostKeyChecking=no -o ConnectTimeout=5 root@"$PROXMOX_HOST" "$@"
|
|
}
|
|
|
|
# Execute command in container
|
|
exec_container() {
|
|
ssh_r630_01 "pct exec $VMID -- $*"
|
|
}
|
|
|
|
main() {
|
|
echo ""
|
|
log_info "========================================="
|
|
log_info "Sankofa Portal Deployment"
|
|
log_info "========================================="
|
|
echo ""
|
|
log_info "Container VMID: $VMID"
|
|
log_info "Container IP: $CONTAINER_IP"
|
|
echo ""
|
|
|
|
# Check if container exists and is running
|
|
log_info "Checking container status..."
|
|
if ! ssh_r630_01 "pct status $VMID >/dev/null 2>&1"; then
|
|
log_error "Container $VMID does not exist. Please run deploy-sankofa-r630-01.sh first."
|
|
exit 1
|
|
fi
|
|
|
|
local status=$(ssh_r630_01 "pct status $VMID" 2>/dev/null | awk '{print $2}' || echo "stopped")
|
|
if [[ "$status" != "running" ]]; then
|
|
log_info "Starting container $VMID..."
|
|
ssh_r630_01 "pct start $VMID"
|
|
sleep 5
|
|
fi
|
|
log_success "Container is running"
|
|
echo ""
|
|
|
|
# Install Node.js
|
|
log_info "Installing Node.js $NODE_VERSION..."
|
|
exec_container bash -c "export DEBIAN_FRONTEND=noninteractive && \
|
|
curl -fsSL https://deb.nodesource.com/setup_${NODE_VERSION}.x | bash - && \
|
|
apt-get install -y -qq nodejs"
|
|
|
|
# Install pnpm
|
|
log_info "Installing pnpm..."
|
|
exec_container bash -c "npm install -g pnpm"
|
|
|
|
log_success "Node.js and pnpm installed"
|
|
echo ""
|
|
|
|
# Copy project files
|
|
log_info "Copying Sankofa Portal project files..."
|
|
if [[ ! -d "$SANKOFA_PROJECT/portal" ]]; then
|
|
log_error "Sankofa portal project not found at $SANKOFA_PROJECT/portal"
|
|
log_info "Please ensure the Sankofa project is available"
|
|
exit 1
|
|
fi
|
|
|
|
# Create app directory
|
|
exec_container bash -c "mkdir -p /opt/sankofa-portal"
|
|
|
|
# Copy portal directory
|
|
log_info "Copying files to container..."
|
|
ssh_r630_01 "pct push $VMID $SANKOFA_PROJECT/portal /opt/sankofa-portal --recursive"
|
|
|
|
log_success "Project files copied"
|
|
echo ""
|
|
|
|
# Install dependencies
|
|
log_info "Installing dependencies..."
|
|
exec_container bash -c "cd /opt/sankofa-portal && pnpm install --frozen-lockfile"
|
|
|
|
log_success "Dependencies installed"
|
|
echo ""
|
|
|
|
# Create environment file
|
|
log_info "Creating environment configuration..."
|
|
exec_container bash -c "cat > /opt/sankofa-portal/.env.local << EOF
|
|
# Keycloak
|
|
KEYCLOAK_URL=$KEYCLOAK_URL
|
|
KEYCLOAK_REALM=$KEYCLOAK_REALM
|
|
KEYCLOAK_CLIENT_ID=$KEYCLOAK_CLIENT_ID
|
|
KEYCLOAK_CLIENT_SECRET=$KEYCLOAK_CLIENT_SECRET
|
|
|
|
# API
|
|
NEXT_PUBLIC_GRAPHQL_ENDPOINT=$API_URL
|
|
NEXT_PUBLIC_GRAPHQL_WS_ENDPOINT=$API_WS_URL
|
|
|
|
# NextAuth
|
|
NEXTAUTH_URL=http://$CONTAINER_IP:3000
|
|
NEXTAUTH_SECRET=$NEXTAUTH_SECRET
|
|
|
|
# Crossplane (if available)
|
|
NEXT_PUBLIC_CROSSPLANE_API=${NEXT_PUBLIC_CROSSPLANE_API:-http://crossplane.sankofa.nexus}
|
|
NEXT_PUBLIC_ARGOCD_URL=${NEXT_PUBLIC_ARGOCD_URL:-http://argocd.sankofa.nexus}
|
|
NEXT_PUBLIC_GRAFANA_URL=${NEXT_PUBLIC_GRAFANA_URL:-http://grafana.sankofa.nexus}
|
|
NEXT_PUBLIC_LOKI_URL=${NEXT_PUBLIC_LOKI_URL:-http://loki.sankofa.nexus:3100}
|
|
|
|
# App
|
|
NEXT_PUBLIC_APP_URL=http://$CONTAINER_IP:3000
|
|
NODE_ENV=production
|
|
EOF"
|
|
|
|
log_success "Environment configured"
|
|
echo ""
|
|
|
|
# Build Portal
|
|
log_info "Building Portal (this may take several minutes)..."
|
|
exec_container bash -c "cd /opt/sankofa-portal && pnpm build"
|
|
|
|
log_success "Portal built"
|
|
echo ""
|
|
|
|
# Create systemd service
|
|
log_info "Creating systemd service..."
|
|
exec_container bash -c "cat > /etc/systemd/system/sankofa-portal.service << 'EOF'
|
|
[Unit]
|
|
Description=Sankofa Portal
|
|
After=network.target
|
|
|
|
[Service]
|
|
Type=simple
|
|
User=root
|
|
WorkingDirectory=/opt/sankofa-portal
|
|
Environment=\"NODE_ENV=production\"
|
|
EnvironmentFile=/opt/sankofa-portal/.env.local
|
|
ExecStart=/usr/bin/node /opt/sankofa-portal/node_modules/.bin/next start
|
|
Restart=always
|
|
RestartSec=10
|
|
StandardOutput=journal
|
|
StandardError=journal
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF"
|
|
|
|
# Start service
|
|
log_info "Starting Portal service..."
|
|
exec_container bash -c "systemctl daemon-reload && \
|
|
systemctl enable sankofa-portal && \
|
|
systemctl start sankofa-portal"
|
|
|
|
sleep 10
|
|
|
|
# Check service status
|
|
if exec_container bash -c "systemctl is-active --quiet sankofa-portal"; then
|
|
log_success "Portal service is running"
|
|
else
|
|
log_error "Portal service failed to start"
|
|
exec_container bash -c "journalctl -u sankofa-portal -n 50 --no-pager"
|
|
exit 1
|
|
fi
|
|
echo ""
|
|
|
|
# Test Portal
|
|
log_info "Testing Portal..."
|
|
sleep 5
|
|
if exec_container bash -c "curl -s -f http://localhost:3000 >/dev/null 2>&1"; then
|
|
log_success "Portal is accessible"
|
|
else
|
|
log_warn "Portal may still be starting - check logs if issues persist"
|
|
fi
|
|
echo ""
|
|
|
|
# Summary
|
|
log_success "========================================="
|
|
log_success "Sankofa Portal Deployment Complete"
|
|
log_success "========================================="
|
|
echo ""
|
|
log_info "Portal Configuration:"
|
|
echo " URL: http://$CONTAINER_IP:3000"
|
|
echo " API: $API_URL"
|
|
echo " Keycloak: $KEYCLOAK_URL"
|
|
echo ""
|
|
log_info "Next steps:"
|
|
echo " 1. Verify Portal is accessible: curl http://$CONTAINER_IP:3000"
|
|
echo " 2. Configure firewall rules if needed"
|
|
echo " 3. Set up Cloudflare tunnels for external access"
|
|
echo ""
|
|
}
|
|
|
|
main "$@"
|