mirror of
https://github.com/myronblair/novacpx
synced 2026-06-30 17:50:41 -05:00
myron
e94dc719c8
Feature Manager (70+ features across 20 categories): - Web servers: Apache2, nginx, OpenLiteSpeed, Varnish - PHP: 7.4/8.1/8.2/8.3 multi-version, Composer - Databases: MySQL 8, MariaDB, PostgreSQL, Redis, Memcached, phpMyAdmin, phpPgAdmin - Email: Postfix, Dovecot, Roundcube, RainLoop, SpamAssassin, Rspamd, DKIM - DNS: BIND9, PowerDNS - FTP: ProFTPD, vsftpd, Pure-FTPd - SSL: Certbot/Let's Encrypt, acme.sh - Security: Fail2Ban, ModSecurity WAF, ImunifyAV, ClamAV, UFW, CrowdSec - Containers: Docker Engine, Docker Compose, Portainer CE, per-account Docker hosting - IP Management: Shared IPs (SNI), Dedicated IPs, IPv6 - Monitoring: Netdata, AWStats, GoAccess, Grafana+Prometheus - Backup: BorgBackup, rclone (S3/B2/GCS), Duplicati - CDN: Cloudflare API, PageSpeed Module - Dev: Gitea, Phusion Passenger, JupyterHub - One-click apps: WordPress+WP-CLI, auto-installer (50+ apps) - Billing: WHMCS bridge, BoxBilling - Reseller: White label, custom nameservers - Notifications: Email, Slack, Telegram - Compliance: Auditd, OSSEC HIDS Auto-deploy pipeline (deploy/): - webhook.php: HMAC-verified GitHub push webhook - deploy-runner.sh: PHP syntax validation → git pull → rsync → DB migrations → PHP-FPM reload - setup-deploy.sh: one-shot setup script, outputs GitHub webhook config - Runs every minute via cron; locked to prevent concurrent deploys Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
93 lines
3.1 KiB
Bash
93 lines
3.1 KiB
Bash
#!/usr/bin/env bash
|
|
# NovaCPX Deploy Runner — runs every minute via cron
|
|
# Processes /tmp/novacpx-deploy-queue.txt
|
|
# Each line: repo_path|web_root|commit
|
|
|
|
QUEUE="/tmp/novacpx-deploy-queue.txt"
|
|
LOG="/var/log/novacpx/deploy.log"
|
|
LOCK="/tmp/novacpx-deploy.lock"
|
|
|
|
log() { echo "[$(date '+%Y-%m-%d %H:%M:%S')] $*" >> "$LOG"; }
|
|
|
|
[[ ! -s "$QUEUE" ]] && exit 0
|
|
|
|
# Prevent concurrent runs
|
|
exec 9>"$LOCK"
|
|
flock -n 9 || { log "Deploy already running, skipping"; exit 0; }
|
|
|
|
while IFS='|' read -r REPO_PATH WEB_ROOT COMMIT; do
|
|
[[ -z "$REPO_PATH" ]] && continue
|
|
log "--- Deploying commit $COMMIT ---"
|
|
|
|
# Validate PHP syntax before applying
|
|
cd "$REPO_PATH" || continue
|
|
git fetch origin >> "$LOG" 2>&1
|
|
|
|
# Check PHP syntax on changed .php files
|
|
CHANGED_PHP=$(git diff HEAD..origin/main --name-only 2>/dev/null | grep '\.php$' || true)
|
|
SYNTAX_OK=true
|
|
for f in $CHANGED_PHP; do
|
|
[[ -f "$REPO_PATH/$f" ]] || continue
|
|
if ! php8.3 -l "$REPO_PATH/$f" >> "$LOG" 2>&1; then
|
|
log "SYNTAX ERROR in $f — aborting deploy"
|
|
SYNTAX_OK=false
|
|
break
|
|
fi
|
|
done
|
|
|
|
if ! $SYNTAX_OK; then
|
|
log "Deploy aborted due to PHP syntax errors"
|
|
continue
|
|
fi
|
|
|
|
# Pull
|
|
BEFORE=$(git rev-parse HEAD)
|
|
git pull origin main >> "$LOG" 2>&1
|
|
AFTER=$(git rev-parse HEAD)
|
|
|
|
if [[ "$BEFORE" == "$AFTER" ]]; then
|
|
log "Nothing new to deploy (already at $AFTER)"
|
|
continue
|
|
fi
|
|
|
|
log "Updated: $BEFORE → $AFTER"
|
|
|
|
# Sync panel files to web root
|
|
rsync -av --delete \
|
|
--exclude='.git' \
|
|
--exclude='api/config.php' \
|
|
--exclude='*.log' \
|
|
"$REPO_PATH/panel/public/" "$WEB_ROOT/" >> "$LOG" 2>&1
|
|
|
|
# Run pending DB migrations
|
|
MIGR_DIR="$REPO_PATH/db/migrations"
|
|
if [[ -d "$MIGR_DIR" ]]; then
|
|
DB_NAME=$(python3 -c "import configparser; c=configparser.ConfigParser(); c.read('/etc/novacpx/config.ini'); print(c['database']['name'])" 2>/dev/null)
|
|
DB_USER=$(python3 -c "import configparser; c=configparser.ConfigParser(); c.read('/etc/novacpx/config.ini'); print(c['database']['user'])" 2>/dev/null)
|
|
DB_PASS=$(python3 -c "import configparser; c=configparser.ConfigParser(); c.read('/etc/novacpx/config.ini'); print(c['database']['pass'])" 2>/dev/null)
|
|
for SQL in "$MIGR_DIR"/*.sql; do
|
|
[[ -f "$SQL" ]] || continue
|
|
MIGR_NAME=$(basename "$SQL" .sql)
|
|
ALREADY=$(mysql -u"$DB_USER" -p"$DB_PASS" "$DB_NAME" -se "SELECT value FROM settings WHERE \`key\`='migration_$MIGR_NAME'" 2>/dev/null)
|
|
if [[ -z "$ALREADY" ]]; then
|
|
log "Running migration: $MIGR_NAME"
|
|
mysql -u"$DB_USER" -p"$DB_PASS" "$DB_NAME" < "$SQL" >> "$LOG" 2>&1
|
|
mysql -u"$DB_USER" -p"$DB_PASS" "$DB_NAME" -e "INSERT INTO settings (\`key\`,\`value\`) VALUES ('migration_$MIGR_NAME','$(date)') ON DUPLICATE KEY UPDATE \`value\`='$(date)'" 2>/dev/null
|
|
fi
|
|
done
|
|
fi
|
|
|
|
# Update VERSION
|
|
git describe --tags --abbrev=0 2>/dev/null > "$REPO_PATH/VERSION" || git rev-parse --short HEAD > "$REPO_PATH/VERSION"
|
|
|
|
# Restart PHP-FPM to pick up code changes
|
|
systemctl reload php8.3-fpm 2>/dev/null || true
|
|
systemctl reload php8.2-fpm 2>/dev/null || true
|
|
|
|
log "Deploy complete: $AFTER"
|
|
|
|
done < "$QUEUE"
|
|
|
|
# Clear queue
|
|
> "$QUEUE"
|