Files

Oier Bravo Urtasun 67d1f82e6a refactor!: unify into one compose, drop airgap/mirror/dnsmasq/avahi/blessingskin

Collapse the override-file matrix into a single docker-compose.yml holding the
whole stack: drasl, minecraft, mc-backup, caddy, nmsr, uptime-kuma. Bring-up is
now just `docker compose up -d --build`.

Removed features (dead-ends for this deployment):
- airgap / full asset mirror (mirror-airgap.sh, mirror-mods.sh, 20-mirror.caddy,
  caddy local-CA export, /ca.crt)
- dnsmasq + avahi/mDNS + dns-records.sh + mdns-host-setup.sh + ENABLE_MDNS;
  DNS is now handled outside this repo (HOST_LAN_IP dropped)
- Blessing Skin auth variant (compose + 00-core-blessingskin.caddy + BS_* env)
- host-nginx-static variant (docker-compose.nginx.yml, nginx/ulicraft.conf.tmpl)
- build-stack.sh and its run modes (online/airgap/core)

Production ingress is the only path now: host nginx terminates TLS (LE certs)
in front of caddy on a localhost-only port; caddy routes every vhost by Host
header. Launcher downloads move mirror/launcher -> launcher/.

Docs: README, deploy skill, and plan/ rewritten to match; obsolete plan docs
(dnsmasq, blessing-skin, assets-mirror, full-airgap-mirror, dns-and-run-modes)
deleted.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-09 02:14:09 +02:00

3.3 KiB

Raw Blame History

Tooling — config rendering, pack render, ingress, fetch scripts

Summary

Scripts in ./tooling/ turn BASE_DOMAIN + templates into a working stack and handle ingress (nginx vhost, TLS certs) and launcher/font fetches. All are cautious: they halt on unset vars or missing inputs rather than emit half-broken output.

Surviving scripts:

render-config.sh — render *.tmpl configs (BASE_DOMAIN only)
render-pack.sh — render packwiz pack templates + index
render-nginx.sh — render/install the host nginx vhost (TLS terminator → caddy)
issue-letsencrypt.sh — issue LE certs via OVH DNS-01 (see 15-letsencrypt.md)
fetch-launcher.sh — download Fjord launcher release assets (see 06-launcher.md)
add-custom-mod.sh — add a custom (non-CDN) mod to the pack
fetch-fonts.sh — vendor the landing page fonts (see 09-landing.md)

render-config.sh

Renders every *.tmpl into its real config by substituting only ${BASE_DOMAIN} (so literal $-syntax belonging to the target file — caddy, toml — is left untouched). Caddy is excluded entirely (it reads {$BASE_DOMAIN} natively).

Targets:

drasl/config/config.toml.tmpl → drasl/config/config.toml
nmsr/config.toml.tmpl → nmsr/config.toml

It then delegates pack templates (mods/*.pw.toml.tmpl, CustomSkinLoader, …) + the packwiz index to render-pack.sh — the single source of pack render.

#!/usr/bin/env bash
set -euo pipefail
cd "$(dirname "$0")/.."
[ -f .env ] && { set -a; . ./.env; set +a; }
: "${BASE_DOMAIN:?BASE_DOMAIN unset (set in .env)}"

render() {  # $1=tmpl  $2=out
  [ -f "$1" ] || { echo "missing template: $1" >&2; exit 1; }
  envsubst '${BASE_DOMAIN}' < "$1" > "$2"
  echo "rendered $2"
}

render drasl/config/config.toml.tmpl drasl/config/config.toml
render nmsr/config.toml.tmpl          nmsr/config.toml
tooling/render-pack.sh

render-nginx.sh

Renders nginx/ulicraft-caddy.conf.tmpl (the host nginx that terminates TLS in front of caddy), substituting $BASE_DOMAIN $APP_DIR $CADDY_HTTP_PORT. Prints to stdout by default; --install writes to sites-available, symlinks sites-enabled, nginx -t, and reloads nginx. See 15-letsencrypt.md.

issue-letsencrypt.sh

Issues a separate cert for the apex and each LE_SUBDOMAINS entry via acme.sh + OVH DNS-01 → certs/<name>/{cert,key}.pem. See 15-letsencrypt.md.

fetch-launcher.sh

Downloads FjordLauncherUnlocked release assets → launcher/<tag>/ and maintains a latest symlink + stable per-OS filename symlinks. Full script in 06-launcher.md.

Generated / gitignored

drasl/config/config.toml      # rendered
nmsr/config.toml              # rendered
launcher/                     # launcher assets
www/                          # landing build output
certs/                        # Let's Encrypt certs
.env                          # secrets + host-specific

Tasks

Write tooling/render-config.sh (above), chmod +x
Write tooling/render-pack.sh (pack templates + index)
Write tooling/render-nginx.sh (see 15)
Write tooling/issue-letsencrypt.sh (see 15)
Write tooling/fetch-launcher.sh (see 06)
Add gettext (envsubst) + jq to host prereqs doc
Update .gitignore for rendered configs + launcher/ + www/ + certs/

3.3 KiB Raw Blame History