Oier Bravo Urtasun
67d1f82e6a
Collapse the override-file matrix into a single docker-compose.yml holding the whole stack: drasl, minecraft, mc-backup, caddy, nmsr, uptime-kuma. Bring-up is now just `docker compose up -d --build`. Removed features (dead-ends for this deployment): - airgap / full asset mirror (mirror-airgap.sh, mirror-mods.sh, 20-mirror.caddy, caddy local-CA export, /ca.crt) - dnsmasq + avahi/mDNS + dns-records.sh + mdns-host-setup.sh + ENABLE_MDNS; DNS is now handled outside this repo (HOST_LAN_IP dropped) - Blessing Skin auth variant (compose + 00-core-blessingskin.caddy + BS_* env) - host-nginx-static variant (docker-compose.nginx.yml, nginx/ulicraft.conf.tmpl) - build-stack.sh and its run modes (online/airgap/core) Production ingress is the only path now: host nginx terminates TLS (LE certs) in front of caddy on a localhost-only port; caddy routes every vhost by Host header. Launcher downloads move mirror/launcher -> launcher/. Docs: README, deploy skill, and plan/ rewritten to match; obsolete plan docs (dnsmasq, blessing-skin, assets-mirror, full-airgap-mirror, dns-and-run-modes) deleted. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
61 lines
2.3 KiB
Bash
Executable File
61 lines
2.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# render-nginx.sh — render the nginx vhost template with the .env values.
|
|
#
|
|
# Substitutes $BASE_DOMAIN, $APP_DIR, $CADDY_HTTP_PORT into
|
|
# nginx/ulicraft-caddy.conf.tmpl (the host nginx that terminates TLS in front of
|
|
# caddy) and prints the result to stdout, or installs it with --install (writes
|
|
# to sites-available, symlinks sites-enabled, tests, reloads nginx).
|
|
#
|
|
# Usage:
|
|
# tooling/render-nginx.sh # render -> stdout
|
|
# tooling/render-nginx.sh --install # render + install + reload nginx
|
|
#
|
|
# .env vars used:
|
|
# BASE_DOMAIN required
|
|
# CADDY_HTTP_PORT localhost port nginx reverse-proxies to (caddy)
|
|
# optional:
|
|
# APP_DIR host path to this repo (cert files live under APP_DIR/certs)
|
|
# — defaults to the repo root (this checkout)
|
|
# SITE_NAME installed filename (default ulicraft.conf)
|
|
set -euo pipefail
|
|
|
|
cd "$(dirname "$0")/.." # repo root
|
|
|
|
log() { printf '\n\033[1;32m==>\033[0m %s\n' "$*"; }
|
|
warn() { printf '\033[1;33m!!\033[0m %s\n' "$*" >&2; }
|
|
die() { printf '\033[1;31mxx\033[0m %s\n' "$*" >&2; exit 1; }
|
|
|
|
[ -f .env ] || die ".env not found (copy .env.example and fill it)"
|
|
# shellcheck disable=SC1091
|
|
set -a; . ./.env; set +a
|
|
: "${BASE_DOMAIN:?BASE_DOMAIN unset in .env}"
|
|
|
|
TEMPLATE="${TEMPLATE:-nginx/ulicraft-caddy.conf.tmpl}"
|
|
[ -f "$TEMPLATE" ] || die "template not found: $TEMPLATE"
|
|
APP_DIR="${APP_DIR:-$PWD}"
|
|
SITE_NAME="${SITE_NAME:-ulicraft.conf}"
|
|
|
|
# CADDY_HTTP_PORT only matters for the caddy-front template; default 80 so the
|
|
# static template (which never references it) still renders cleanly.
|
|
export BASE_DOMAIN APP_DIR
|
|
export CADDY_HTTP_PORT="${CADDY_HTTP_PORT:-80}"
|
|
|
|
rendered="$(envsubst '$BASE_DOMAIN $APP_DIR $CADDY_HTTP_PORT' < "$TEMPLATE")"
|
|
|
|
if [ "${1:-}" != "--install" ]; then
|
|
printf '%s\n' "$rendered"
|
|
warn "dry run — pipe to a file or pass --install to deploy"
|
|
exit 0
|
|
fi
|
|
|
|
command -v nginx >/dev/null 2>&1 || die "nginx not found on PATH"
|
|
avail="/etc/nginx/sites-available/$SITE_NAME"
|
|
enabled="/etc/nginx/sites-enabled/$SITE_NAME"
|
|
|
|
log "installing $TEMPLATE -> $avail (APP_DIR=$APP_DIR, CADDY_HTTP_PORT=$CADDY_HTTP_PORT)"
|
|
printf '%s\n' "$rendered" | sudo tee "$avail" >/dev/null
|
|
sudo ln -sf "$avail" "$enabled"
|
|
sudo nginx -t
|
|
sudo systemctl reload nginx
|
|
log "done — nginx reloaded"
|