From 32d211bca46e692421b0377dc1e249d64846a40e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=D0=92=D0=B8=D0=BA=D1=82=D0=BE=D1=80?=
 <78488229+viktor138irk@users.noreply.github.com>
Date: Fri, 8 May 2026 16:57:37 +0900
Subject: [PATCH] Add interactive VPS installer

---
 deploy/vps/install.sh | 410 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 410 insertions(+)
 create mode 100644 deploy/vps/install.sh

diff --git a/deploy/vps/install.sh b/deploy/vps/install.sh
new file mode 100644
index 0000000..2f2dfb2
--- /dev/null
+++ b/deploy/vps/install.sh
@@ -0,0 +1,410 @@
+#!/usr/bin/env bash
+set -Eeuo pipefail
+
+# WSChat interactive VPS installer.
+# FastPanel domains/sites must be created manually in FastPanel UI.
+
+PROJECT_NAME="WSChat"
+DEFAULT_PROJECT_ROOT="/opt/ws-chat"
+DEFAULT_REPO_URL="https://github.com/viktor138irk/chat.git"
+DEFAULT_NODE_MAJOR="20"
+DEFAULT_BACKEND_HOST="127.0.0.1"
+DEFAULT_BACKEND_PORT="3000"
+DEFAULT_PM2_PROCESS="wschat-backend"
+
+STEP=0
+TOTAL_STEPS=13
+LOG_FILE="/tmp/wschat-install-$(date +%Y%m%d-%H%M%S).log"
+
+PROJECT_ROOT="${PROJECT_ROOT:-$DEFAULT_PROJECT_ROOT}"
+SOURCE_PATH="${SOURCE_PATH:-$PROJECT_ROOT/source}"
+DATA_PATH="${DATA_PATH:-$PROJECT_ROOT/data}"
+LOGS_PATH="${LOGS_PATH:-$PROJECT_ROOT/logs}"
+BACKUPS_PATH="${BACKUPS_PATH:-$PROJECT_ROOT/backups}"
+UPDATES_PATH="${UPDATES_PATH:-$PROJECT_ROOT/updates}"
+REPO_URL="${REPO_URL:-$DEFAULT_REPO_URL}"
+NODE_MAJOR="${NODE_MAJOR:-$DEFAULT_NODE_MAJOR}"
+BACKEND_HOST="${BACKEND_HOST:-$DEFAULT_BACKEND_HOST}"
+BACKEND_PORT="${BACKEND_PORT:-$DEFAULT_BACKEND_PORT}"
+PM2_PROCESS_NAME="${PM2_PROCESS_NAME:-$DEFAULT_PM2_PROCESS}"
+
+ADMIN_DOMAIN="${ADMIN_DOMAIN:-admin.example.ru}"
+WIDGET_DOMAIN="${WIDGET_DOMAIN:-widget.example.ru}"
+API_DOMAIN="${API_DOMAIN:-api.example.ru}"
+ADMIN_WEBROOT="${ADMIN_WEBROOT:-}"
+WIDGET_WEBROOT="${WIDGET_WEBROOT:-}"
+TELEGRAM_BOT_TOKEN="${TELEGRAM_BOT_TOKEN:-}"
+JWT_SECRET="${JWT_SECRET:-}"
+
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+BOLD='\033[1m'
+NC='\033[0m'
+
+log() {
+  printf "%s\n" "$*" | tee -a "$LOG_FILE"
+}
+
+info() {
+  printf "${BLUE}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
+}
+
+ok() {
+  printf "${GREEN}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
+}
+
+warn() {
+  printf "${YELLOW}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
+}
+
+fail() {
+  printf "${RED}%s${NC}\n" "$*" | tee -a "$LOG_FILE" >&2
+}
+
+current_step() {
+  STEP=$((STEP + 1))
+  printf "\n${BOLD}${BLUE}[%02d/%02d] %s${NC}\n" "$STEP" "$TOTAL_STEPS" "$1" | tee -a "$LOG_FILE"
+}
+
+run() {
+  log "→ $*"
+  "$@" 2>&1 | tee -a "$LOG_FILE"
+}
+
+on_error() {
+  local exit_code=$?
+  fail ""
+  fail "Installation failed on step ${STEP}/${TOTAL_STEPS}. Exit code: ${exit_code}"
+  fail "Log file: ${LOG_FILE}"
+  fail "Last task should be visible above. Fix the error and rerun installer."
+  exit "$exit_code"
+}
+trap on_error ERR
+
+ask() {
+  local prompt="$1"
+  local default_value="$2"
+  local result
+  read -r -p "$(printf "${BOLD}%s${NC} [%s]: " "$prompt" "$default_value")" result
+  if [[ -z "$result" ]]; then
+    printf "%s" "$default_value"
+  else
+    printf "%s" "$result"
+  fi
+}
+
+ask_secret() {
+  local prompt="$1"
+  local result
+  read -r -s -p "$(printf "${BOLD}%s${NC}: " "$prompt")" result
+  printf "\n" >&2
+  printf "%s" "$result"
+}
+
+generate_secret() {
+  if command -v openssl >/dev/null 2>&1; then
+    openssl rand -hex 32
+  else
+    date +%s%N | sha256sum | awk '{print $1}'
+  fi
+}
+
+require_root() {
+  if [[ "${EUID}" -ne 0 ]]; then
+    fail "Run as root: bash deploy/vps/install.sh"
+    exit 1
+  fi
+}
+
+validate_fastpanel_path() {
+  local label="$1"
+  local path="$2"
+  if [[ -z "$path" ]]; then
+    warn "$label webroot is empty. Static publishing will be skipped."
+    return 0
+  fi
+  if [[ "$path" != /var/www/*/data/www/* ]]; then
+    fail "$label webroot must look like /var/www/<fastpanel-user>/data/www/<domain>"
+    fail "Got: $path"
+    return 1
+  fi
+}
+
+write_backend_env() {
+  local env_file="$SOURCE_PATH/backend/.env"
+  cat > "$env_file" <<EOF
+APP_ENV=production
+APP_HOST=${BACKEND_HOST}
+APP_PORT=${BACKEND_PORT}
+PUBLIC_API_URL=https://${API_DOMAIN}
+PUBLIC_WS_URL=wss://${API_DOMAIN}/ws
+TRUST_PROXY=true
+
+DATABASE_PATH=${DATA_PATH}/chat.sqlite
+
+ADMIN_ORIGIN=https://${ADMIN_DOMAIN}
+WIDGET_ORIGIN=https://${WIDGET_DOMAIN}
+
+TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN}
+TELEGRAM_PROXY_ENABLED=false
+TELEGRAM_PROXY_TYPE=socks5
+TELEGRAM_PROXY_HOST=127.0.0.1
+TELEGRAM_PROXY_PORT=9050
+TELEGRAM_PROXY_USERNAME=
+TELEGRAM_PROXY_PASSWORD=
+
+JWT_SECRET=${JWT_SECRET}
+
+FRONTEND_DEPLOY_ENABLED=false
+FRONTEND_DEPLOY_MODE=manual-fastpanel
+FASTPANEL_SAFE_MODE=true
+EOF
+  chmod 600 "$env_file"
+}
+
+write_install_state() {
+  cat > "$PROJECT_ROOT/install-state.env" <<EOF
+PROJECT_NAME=${PROJECT_NAME}
+PROJECT_ROOT=${PROJECT_ROOT}
+SOURCE_PATH=${SOURCE_PATH}
+DATA_PATH=${DATA_PATH}
+LOGS_PATH=${LOGS_PATH}
+BACKUPS_PATH=${BACKUPS_PATH}
+UPDATES_PATH=${UPDATES_PATH}
+ADMIN_DOMAIN=${ADMIN_DOMAIN}
+WIDGET_DOMAIN=${WIDGET_DOMAIN}
+API_DOMAIN=${API_DOMAIN}
+ADMIN_WEBROOT=${ADMIN_WEBROOT}
+WIDGET_WEBROOT=${WIDGET_WEBROOT}
+BACKEND_HOST=${BACKEND_HOST}
+BACKEND_PORT=${BACKEND_PORT}
+PM2_PROCESS_NAME=${PM2_PROCESS_NAME}
+FASTPANEL_SAFE_MODE=true
+EOF
+  chmod 600 "$PROJECT_ROOT/install-state.env"
+}
+
+print_header() {
+  clear || true
+  printf "${BOLD}${BLUE}WSChat interactive VPS installer${NC}\n"
+  printf "FastPanel sites/domains are created manually. This installer will not edit FastPanel configs.\n"
+  printf "Log file: %s\n\n" "$LOG_FILE"
+}
+
+print_summary() {
+  cat <<EOF
+
+${BOLD}Configuration summary${NC}
+Project root:      ${PROJECT_ROOT}
+Source path:       ${SOURCE_PATH}
+Data path:         ${DATA_PATH}
+Admin domain:      ${ADMIN_DOMAIN}
+Widget domain:     ${WIDGET_DOMAIN}
+API domain:        ${API_DOMAIN}
+Backend:           http://${BACKEND_HOST}:${BACKEND_PORT}
+PM2 process:       ${PM2_PROCESS_NAME}
+Admin webroot:     ${ADMIN_WEBROOT:-not set}
+Widget webroot:    ${WIDGET_WEBROOT:-not set}
+Telegram token:    $(if [[ -n "$TELEGRAM_BOT_TOKEN" ]]; then echo "set"; else echo "empty"; fi)
+
+EOF
+}
+
+install_packages() {
+  run apt update
+  run apt install -y git curl rsync sqlite3 ca-certificates gnupg build-essential python3 make g++ openssl
+}
+
+install_node() {
+  if command -v node >/dev/null 2>&1 && node -v | grep -q "^v${NODE_MAJOR}\."; then
+    ok "Node.js already installed: $(node -v)"
+    return 0
+  fi
+  run bash -c "curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash -"
+  run apt install -y nodejs
+  ok "Node.js: $(node -v)"
+  ok "npm: $(npm -v)"
+}
+
+install_pm2() {
+  if command -v pm2 >/dev/null 2>&1; then
+    ok "PM2 already installed: $(pm2 -v)"
+  else
+    run npm install -g pm2
+    ok "PM2 installed: $(pm2 -v)"
+  fi
+}
+
+clone_or_update_repo() {
+  mkdir -p "$PROJECT_ROOT"
+  if [[ -d "$SOURCE_PATH/.git" ]]; then
+    cd "$SOURCE_PATH"
+    run git fetch origin main
+    run git pull --ff-only origin main
+  else
+    mkdir -p "$(dirname "$SOURCE_PATH")"
+    run git clone "$REPO_URL" "$SOURCE_PATH"
+  fi
+}
+
+install_dependencies() {
+  cd "$SOURCE_PATH"
+  run npm install
+}
+
+start_backend_pm2() {
+  cd "$SOURCE_PATH"
+  if pm2 describe "$PM2_PROCESS_NAME" >/dev/null 2>&1; then
+    run pm2 restart "$PM2_PROCESS_NAME" --update-env
+  else
+    run pm2 start backend/src/server.js --name "$PM2_PROCESS_NAME"
+  fi
+  run pm2 save
+  pm2 startup systemd -u root --hp /root 2>&1 | tee -a "$LOG_FILE" || true
+}
+
+check_backend() {
+  sleep 2
+  run curl -fsS "http://${BACKEND_HOST}:${BACKEND_PORT}/health"
+}
+
+build_frontend() {
+  cd "$SOURCE_PATH"
+  run npm run build:admin
+  run npm run build:widget
+}
+
+publish_static_if_configured() {
+  cd "$SOURCE_PATH"
+  if [[ -n "$ADMIN_WEBROOT" ]]; then
+    if [[ ! -d "$ADMIN_WEBROOT" ]]; then
+      warn "Admin webroot does not exist: $ADMIN_WEBROOT"
+      warn "Skipping admin publish. Create the site manually in FastPanel first."
+    else
+      run rsync -av --delete admin-panel/dist/ "$ADMIN_WEBROOT/"
+    fi
+  fi
+
+  if [[ -n "$WIDGET_WEBROOT" ]]; then
+    if [[ ! -d "$WIDGET_WEBROOT" ]]; then
+      warn "Widget webroot does not exist: $WIDGET_WEBROOT"
+      warn "Skipping widget publish. Create the site manually in FastPanel first."
+    else
+      run rsync -av --delete widget/dist/ "$WIDGET_WEBROOT/"
+    fi
+  fi
+}
+
+main() {
+  print_header
+  require_root
+
+  current_step "Collect configuration"
+  PROJECT_ROOT="$(ask "Project directory" "$PROJECT_ROOT")"
+  SOURCE_PATH="${PROJECT_ROOT}/source"
+  DATA_PATH="${PROJECT_ROOT}/data"
+  LOGS_PATH="${PROJECT_ROOT}/logs"
+  BACKUPS_PATH="${PROJECT_ROOT}/backups"
+  UPDATES_PATH="${PROJECT_ROOT}/updates"
+
+  ADMIN_DOMAIN="$(ask "Admin domain" "$ADMIN_DOMAIN")"
+  WIDGET_DOMAIN="$(ask "Widget domain" "$WIDGET_DOMAIN")"
+  API_DOMAIN="$(ask "API domain" "$API_DOMAIN")"
+  ADMIN_WEBROOT="$(ask "Admin FastPanel webroot, leave empty to skip publishing" "$ADMIN_WEBROOT")"
+  WIDGET_WEBROOT="$(ask "Widget FastPanel webroot, leave empty to skip publishing" "$WIDGET_WEBROOT")"
+  TELEGRAM_BOT_TOKEN="$(ask_secret "Telegram bot token, leave empty for now")"
+  JWT_SECRET="$(ask "JWT secret" "$(generate_secret)")"
+
+  validate_fastpanel_path "Admin" "$ADMIN_WEBROOT"
+  validate_fastpanel_path "Widget" "$WIDGET_WEBROOT"
+  print_summary
+  read -r -p "Continue installation? [Y/n]: " confirm
+  if [[ "$confirm" =~ ^[Nn]$ ]]; then
+    warn "Installation cancelled."
+    exit 0
+  fi
+
+  current_step "Install base packages"
+  install_packages
+
+  current_step "Install Node.js"
+  install_node
+
+  current_step "Install PM2"
+  install_pm2
+
+  current_step "Create WSChat directories"
+  mkdir -p "$PROJECT_ROOT" "$DATA_PATH" "$LOGS_PATH" "$BACKUPS_PATH" "$UPDATES_PATH"
+  ok "Directories created under $PROJECT_ROOT"
+
+  current_step "Clone or update repository"
+  clone_or_update_repo
+
+  current_step "Install project dependencies"
+  install_dependencies
+
+  current_step "Write backend .env"
+  write_backend_env
+  write_install_state
+  ok "Backend env written to $SOURCE_PATH/backend/.env"
+  ok "Install state written to $PROJECT_ROOT/install-state.env"
+
+  current_step "Start backend with PM2"
+  start_backend_pm2
+
+  current_step "Check backend health"
+  check_backend
+
+  current_step "Build admin and widget"
+  build_frontend
+
+  current_step "Publish static files if webroots are configured"
+  publish_static_if_configured
+
+  current_step "Print FastPanel proxy instructions"
+  cat <<EOF | tee -a "$LOG_FILE"
+
+Create/configure sites manually in FastPanel:
+- https://${ADMIN_DOMAIN}
+- https://${WIDGET_DOMAIN}
+- https://${API_DOMAIN}
+
+Configure ${API_DOMAIN} as reverse proxy to:
+  http://${BACKEND_HOST}:${BACKEND_PORT}
+
+WebSocket path /ws must support Upgrade headers.
+
+Typical Nginx locations:
+
+location /ws {
+    proxy_pass http://${BACKEND_HOST}:${BACKEND_PORT}/ws;
+    proxy_http_version 1.1;
+    proxy_set_header Upgrade \$http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_set_header Host \$host;
+    proxy_set_header X-Real-IP \$remote_addr;
+    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto \$scheme;
+}
+
+location / {
+    proxy_pass http://${BACKEND_HOST}:${BACKEND_PORT};
+    proxy_set_header Host \$host;
+    proxy_set_header X-Real-IP \$remote_addr;
+    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto \$scheme;
+}
+
+EOF
+
+  current_step "Finish"
+  ok "WSChat backend installation finished."
+  ok "Backend local health: http://${BACKEND_HOST}:${BACKEND_PORT}/health"
+  ok "PM2 process: ${PM2_PROCESS_NAME}"
+  ok "Log file: ${LOG_FILE}"
+  warn "Next: configure api domain proxy in FastPanel, then check https://${API_DOMAIN}/health"
+}
+
+main "$@"