mirror of
https://github.com/profullstack/agentbbs.git
synced 2026-08-13 14:27:27 +00:00
Anthony Ettinger
3230807421
Deploy automation (idempotent, runs on every deploy): - .github/workflows/deploy.yml: push to main/master (or dispatch) SSHes to the droplet and re-runs setup.sh; deploys the pushed branch; smoke-tests :22. - scripts/self-update.sh + agentbbs-update.timer: autonomous backstop that redeploys only when origin advances. - setup.sh hardened: flock, fetch+reset (survives force-push), fixed the always-skipped arcade asset fetch path. Membership model: - Free, email-verified members get their own Docker pod (pod@ paywall removed) and a /~name homepage (seeded at join@). - join@ is now interactive: email -> emailed 6-digit code -> enter code. - Premium ($10 one-time, lifetime via CoinPay) grants a personal <name>@host email (new internal/forwardemail; forwardemail.net aliases) and custom domains (domain@ gated to Premium). - ensurePremium() silently verifies/grants/provisions on hub login, join@, and domain@. New-signup details emailed to AGENTBBS_SIGNUP_NOTIFY (subject "bbs"). Store: User.Premium + premium/premium_ref cols, ConfirmEmailCode, GrantPremium. Tests: store_premium_test.go, forwardemail_test.go. Build/vet/gofmt/test green. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
43 lines
1.5 KiB
Bash
Executable file
43 lines
1.5 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
#
|
|
# self-update.sh — pull the tracked branch and, if it advanced (or the service
|
|
# is down, or --force), re-run the idempotent provisioner to redeploy.
|
|
#
|
|
# Designed to be safe to run on a timer: when origin has not moved and agentbbs
|
|
# is healthy it does nothing and exits 0, so it costs one `git fetch` per tick.
|
|
# setup.sh holds a flock, so this never races a concurrent CI deploy.
|
|
#
|
|
# sudo scripts/self-update.sh # redeploy only if origin/<branch> moved
|
|
# sudo scripts/self-update.sh --force # redeploy unconditionally
|
|
#
|
|
set -euo pipefail
|
|
|
|
REPO="${REPO:-https://github.com/profullstack/agentbbs.git}"
|
|
BRANCH="${BRANCH:-main}"
|
|
SRC_DIR="${SRC_DIR:-/opt/agentbbs}"
|
|
|
|
FORCE=0
|
|
[ "${1:-}" = "--force" ] && FORCE=1
|
|
|
|
[ "$(id -u)" -eq 0 ] || { echo "self-update.sh must run as root" >&2; exit 1; }
|
|
|
|
# First-ever run on a bare box: clone, then always provision.
|
|
if [ ! -d "$SRC_DIR/.git" ]; then
|
|
git clone --depth 1 -b "$BRANCH" "$REPO" "$SRC_DIR"
|
|
exec "$SRC_DIR/setup.sh"
|
|
fi
|
|
|
|
git -C "$SRC_DIR" fetch --depth 1 origin "$BRANCH"
|
|
local_rev="$(git -C "$SRC_DIR" rev-parse HEAD)"
|
|
remote_rev="$(git -C "$SRC_DIR" rev-parse "origin/${BRANCH}")"
|
|
|
|
if [ "$FORCE" -eq 0 ] \
|
|
&& [ "$local_rev" = "$remote_rev" ] \
|
|
&& systemctl is-active --quiet agentbbs; then
|
|
echo "agentbbs up to date at ${remote_rev:0:12} and healthy; nothing to do"
|
|
exit 0
|
|
fi
|
|
|
|
echo "redeploying: ${local_rev:0:12} -> ${remote_rev:0:12} (force=$FORCE)"
|
|
# setup.sh does the reset --hard, rebuild, and restart under its own lock.
|
|
exec "$SRC_DIR/setup.sh"
|