Add interactive VPS installer
Этот коммит содержится в:
Виктор
@@ -0,0 +1,410 @@
|
||||
#!/usr/bin/env bash
|
||||
set -Eeuo pipefail
|
||||
|
||||
# WSChat interactive VPS installer.
|
||||
# FastPanel domains/sites must be created manually in FastPanel UI.
|
||||
|
||||
PROJECT_NAME="WSChat"
|
||||
DEFAULT_PROJECT_ROOT="/opt/ws-chat"
|
||||
DEFAULT_REPO_URL="https://github.com/viktor138irk/chat.git"
|
||||
DEFAULT_NODE_MAJOR="20"
|
||||
DEFAULT_BACKEND_HOST="127.0.0.1"
|
||||
DEFAULT_BACKEND_PORT="3000"
|
||||
DEFAULT_PM2_PROCESS="wschat-backend"
|
||||
|
||||
STEP=0
|
||||
TOTAL_STEPS=13
|
||||
LOG_FILE="/tmp/wschat-install-$(date +%Y%m%d-%H%M%S).log"
|
||||
|
||||
PROJECT_ROOT="${PROJECT_ROOT:-$DEFAULT_PROJECT_ROOT}"
|
||||
SOURCE_PATH="${SOURCE_PATH:-$PROJECT_ROOT/source}"
|
||||
DATA_PATH="${DATA_PATH:-$PROJECT_ROOT/data}"
|
||||
LOGS_PATH="${LOGS_PATH:-$PROJECT_ROOT/logs}"
|
||||
BACKUPS_PATH="${BACKUPS_PATH:-$PROJECT_ROOT/backups}"
|
||||
UPDATES_PATH="${UPDATES_PATH:-$PROJECT_ROOT/updates}"
|
||||
REPO_URL="${REPO_URL:-$DEFAULT_REPO_URL}"
|
||||
NODE_MAJOR="${NODE_MAJOR:-$DEFAULT_NODE_MAJOR}"
|
||||
BACKEND_HOST="${BACKEND_HOST:-$DEFAULT_BACKEND_HOST}"
|
||||
BACKEND_PORT="${BACKEND_PORT:-$DEFAULT_BACKEND_PORT}"
|
||||
PM2_PROCESS_NAME="${PM2_PROCESS_NAME:-$DEFAULT_PM2_PROCESS}"
|
||||
|
||||
ADMIN_DOMAIN="${ADMIN_DOMAIN:-admin.example.ru}"
|
||||
WIDGET_DOMAIN="${WIDGET_DOMAIN:-widget.example.ru}"
|
||||
API_DOMAIN="${API_DOMAIN:-api.example.ru}"
|
||||
ADMIN_WEBROOT="${ADMIN_WEBROOT:-}"
|
||||
WIDGET_WEBROOT="${WIDGET_WEBROOT:-}"
|
||||
TELEGRAM_BOT_TOKEN="${TELEGRAM_BOT_TOKEN:-}"
|
||||
JWT_SECRET="${JWT_SECRET:-}"
|
||||
|
||||
RED='\033[0;31m'
|
||||
GREEN='\033[0;32m'
|
||||
YELLOW='\033[1;33m'
|
||||
BLUE='\033[0;34m'
|
||||
BOLD='\033[1m'
|
||||
NC='\033[0m'
|
||||
|
||||
log() {
|
||||
printf "%s\n" "$*" | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
info() {
|
||||
printf "${BLUE}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
ok() {
|
||||
printf "${GREEN}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
warn() {
|
||||
printf "${YELLOW}%s${NC}\n" "$*" | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
fail() {
|
||||
printf "${RED}%s${NC}\n" "$*" | tee -a "$LOG_FILE" >&2
|
||||
}
|
||||
|
||||
current_step() {
|
||||
STEP=$((STEP + 1))
|
||||
printf "\n${BOLD}${BLUE}[%02d/%02d] %s${NC}\n" "$STEP" "$TOTAL_STEPS" "$1" | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
run() {
|
||||
log "→ $*"
|
||||
"$@" 2>&1 | tee -a "$LOG_FILE"
|
||||
}
|
||||
|
||||
on_error() {
|
||||
local exit_code=$?
|
||||
fail ""
|
||||
fail "Installation failed on step ${STEP}/${TOTAL_STEPS}. Exit code: ${exit_code}"
|
||||
fail "Log file: ${LOG_FILE}"
|
||||
fail "Last task should be visible above. Fix the error and rerun installer."
|
||||
exit "$exit_code"
|
||||
}
|
||||
trap on_error ERR
|
||||
|
||||
ask() {
|
||||
local prompt="$1"
|
||||
local default_value="$2"
|
||||
local result
|
||||
read -r -p "$(printf "${BOLD}%s${NC} [%s]: " "$prompt" "$default_value")" result
|
||||
if [[ -z "$result" ]]; then
|
||||
printf "%s" "$default_value"
|
||||
else
|
||||
printf "%s" "$result"
|
||||
fi
|
||||
}
|
||||
|
||||
ask_secret() {
|
||||
local prompt="$1"
|
||||
local result
|
||||
read -r -s -p "$(printf "${BOLD}%s${NC}: " "$prompt")" result
|
||||
printf "\n" >&2
|
||||
printf "%s" "$result"
|
||||
}
|
||||
|
||||
generate_secret() {
|
||||
if command -v openssl >/dev/null 2>&1; then
|
||||
openssl rand -hex 32
|
||||
else
|
||||
date +%s%N | sha256sum | awk '{print $1}'
|
||||
fi
|
||||
}
|
||||
|
||||
require_root() {
|
||||
if [[ "${EUID}" -ne 0 ]]; then
|
||||
fail "Run as root: bash deploy/vps/install.sh"
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
validate_fastpanel_path() {
|
||||
local label="$1"
|
||||
local path="$2"
|
||||
if [[ -z "$path" ]]; then
|
||||
warn "$label webroot is empty. Static publishing will be skipped."
|
||||
return 0
|
||||
fi
|
||||
if [[ "$path" != /var/www/*/data/www/* ]]; then
|
||||
fail "$label webroot must look like /var/www/<fastpanel-user>/data/www/<domain>"
|
||||
fail "Got: $path"
|
||||
return 1
|
||||
fi
|
||||
}
|
||||
|
||||
write_backend_env() {
|
||||
local env_file="$SOURCE_PATH/backend/.env"
|
||||
cat > "$env_file" <<EOF
|
||||
APP_ENV=production
|
||||
APP_HOST=${BACKEND_HOST}
|
||||
APP_PORT=${BACKEND_PORT}
|
||||
PUBLIC_API_URL=https://${API_DOMAIN}
|
||||
PUBLIC_WS_URL=wss://${API_DOMAIN}/ws
|
||||
TRUST_PROXY=true
|
||||
|
||||
DATABASE_PATH=${DATA_PATH}/chat.sqlite
|
||||
|
||||
ADMIN_ORIGIN=https://${ADMIN_DOMAIN}
|
||||
WIDGET_ORIGIN=https://${WIDGET_DOMAIN}
|
||||
|
||||
TELEGRAM_BOT_TOKEN=${TELEGRAM_BOT_TOKEN}
|
||||
TELEGRAM_PROXY_ENABLED=false
|
||||
TELEGRAM_PROXY_TYPE=socks5
|
||||
TELEGRAM_PROXY_HOST=127.0.0.1
|
||||
TELEGRAM_PROXY_PORT=9050
|
||||
TELEGRAM_PROXY_USERNAME=
|
||||
TELEGRAM_PROXY_PASSWORD=
|
||||
|
||||
JWT_SECRET=${JWT_SECRET}
|
||||
|
||||
FRONTEND_DEPLOY_ENABLED=false
|
||||
FRONTEND_DEPLOY_MODE=manual-fastpanel
|
||||
FASTPANEL_SAFE_MODE=true
|
||||
EOF
|
||||
chmod 600 "$env_file"
|
||||
}
|
||||
|
||||
write_install_state() {
|
||||
cat > "$PROJECT_ROOT/install-state.env" <<EOF
|
||||
PROJECT_NAME=${PROJECT_NAME}
|
||||
PROJECT_ROOT=${PROJECT_ROOT}
|
||||
SOURCE_PATH=${SOURCE_PATH}
|
||||
DATA_PATH=${DATA_PATH}
|
||||
LOGS_PATH=${LOGS_PATH}
|
||||
BACKUPS_PATH=${BACKUPS_PATH}
|
||||
UPDATES_PATH=${UPDATES_PATH}
|
||||
ADMIN_DOMAIN=${ADMIN_DOMAIN}
|
||||
WIDGET_DOMAIN=${WIDGET_DOMAIN}
|
||||
API_DOMAIN=${API_DOMAIN}
|
||||
ADMIN_WEBROOT=${ADMIN_WEBROOT}
|
||||
WIDGET_WEBROOT=${WIDGET_WEBROOT}
|
||||
BACKEND_HOST=${BACKEND_HOST}
|
||||
BACKEND_PORT=${BACKEND_PORT}
|
||||
PM2_PROCESS_NAME=${PM2_PROCESS_NAME}
|
||||
FASTPANEL_SAFE_MODE=true
|
||||
EOF
|
||||
chmod 600 "$PROJECT_ROOT/install-state.env"
|
||||
}
|
||||
|
||||
print_header() {
|
||||
clear || true
|
||||
printf "${BOLD}${BLUE}WSChat interactive VPS installer${NC}\n"
|
||||
printf "FastPanel sites/domains are created manually. This installer will not edit FastPanel configs.\n"
|
||||
printf "Log file: %s\n\n" "$LOG_FILE"
|
||||
}
|
||||
|
||||
print_summary() {
|
||||
cat <<EOF
|
||||
|
||||
${BOLD}Configuration summary${NC}
|
||||
Project root: ${PROJECT_ROOT}
|
||||
Source path: ${SOURCE_PATH}
|
||||
Data path: ${DATA_PATH}
|
||||
Admin domain: ${ADMIN_DOMAIN}
|
||||
Widget domain: ${WIDGET_DOMAIN}
|
||||
API domain: ${API_DOMAIN}
|
||||
Backend: http://${BACKEND_HOST}:${BACKEND_PORT}
|
||||
PM2 process: ${PM2_PROCESS_NAME}
|
||||
Admin webroot: ${ADMIN_WEBROOT:-not set}
|
||||
Widget webroot: ${WIDGET_WEBROOT:-not set}
|
||||
Telegram token: $(if [[ -n "$TELEGRAM_BOT_TOKEN" ]]; then echo "set"; else echo "empty"; fi)
|
||||
|
||||
EOF
|
||||
}
|
||||
|
||||
install_packages() {
|
||||
run apt update
|
||||
run apt install -y git curl rsync sqlite3 ca-certificates gnupg build-essential python3 make g++ openssl
|
||||
}
|
||||
|
||||
install_node() {
|
||||
if command -v node >/dev/null 2>&1 && node -v | grep -q "^v${NODE_MAJOR}\."; then
|
||||
ok "Node.js already installed: $(node -v)"
|
||||
return 0
|
||||
fi
|
||||
run bash -c "curl -fsSL https://deb.nodesource.com/setup_${NODE_MAJOR}.x | bash -"
|
||||
run apt install -y nodejs
|
||||
ok "Node.js: $(node -v)"
|
||||
ok "npm: $(npm -v)"
|
||||
}
|
||||
|
||||
install_pm2() {
|
||||
if command -v pm2 >/dev/null 2>&1; then
|
||||
ok "PM2 already installed: $(pm2 -v)"
|
||||
else
|
||||
run npm install -g pm2
|
||||
ok "PM2 installed: $(pm2 -v)"
|
||||
fi
|
||||
}
|
||||
|
||||
clone_or_update_repo() {
|
||||
mkdir -p "$PROJECT_ROOT"
|
||||
if [[ -d "$SOURCE_PATH/.git" ]]; then
|
||||
cd "$SOURCE_PATH"
|
||||
run git fetch origin main
|
||||
run git pull --ff-only origin main
|
||||
else
|
||||
mkdir -p "$(dirname "$SOURCE_PATH")"
|
||||
run git clone "$REPO_URL" "$SOURCE_PATH"
|
||||
fi
|
||||
}
|
||||
|
||||
install_dependencies() {
|
||||
cd "$SOURCE_PATH"
|
||||
run npm install
|
||||
}
|
||||
|
||||
start_backend_pm2() {
|
||||
cd "$SOURCE_PATH"
|
||||
if pm2 describe "$PM2_PROCESS_NAME" >/dev/null 2>&1; then
|
||||
run pm2 restart "$PM2_PROCESS_NAME" --update-env
|
||||
else
|
||||
run pm2 start backend/src/server.js --name "$PM2_PROCESS_NAME"
|
||||
fi
|
||||
run pm2 save
|
||||
pm2 startup systemd -u root --hp /root 2>&1 | tee -a "$LOG_FILE" || true
|
||||
}
|
||||
|
||||
check_backend() {
|
||||
sleep 2
|
||||
run curl -fsS "http://${BACKEND_HOST}:${BACKEND_PORT}/health"
|
||||
}
|
||||
|
||||
build_frontend() {
|
||||
cd "$SOURCE_PATH"
|
||||
run npm run build:admin
|
||||
run npm run build:widget
|
||||
}
|
||||
|
||||
publish_static_if_configured() {
|
||||
cd "$SOURCE_PATH"
|
||||
if [[ -n "$ADMIN_WEBROOT" ]]; then
|
||||
if [[ ! -d "$ADMIN_WEBROOT" ]]; then
|
||||
warn "Admin webroot does not exist: $ADMIN_WEBROOT"
|
||||
warn "Skipping admin publish. Create the site manually in FastPanel first."
|
||||
else
|
||||
run rsync -av --delete admin-panel/dist/ "$ADMIN_WEBROOT/"
|
||||
fi
|
||||
fi
|
||||
|
||||
if [[ -n "$WIDGET_WEBROOT" ]]; then
|
||||
if [[ ! -d "$WIDGET_WEBROOT" ]]; then
|
||||
warn "Widget webroot does not exist: $WIDGET_WEBROOT"
|
||||
warn "Skipping widget publish. Create the site manually in FastPanel first."
|
||||
else
|
||||
run rsync -av --delete widget/dist/ "$WIDGET_WEBROOT/"
|
||||
fi
|
||||
fi
|
||||
}
|
||||
|
||||
main() {
|
||||
print_header
|
||||
require_root
|
||||
|
||||
current_step "Collect configuration"
|
||||
PROJECT_ROOT="$(ask "Project directory" "$PROJECT_ROOT")"
|
||||
SOURCE_PATH="${PROJECT_ROOT}/source"
|
||||
DATA_PATH="${PROJECT_ROOT}/data"
|
||||
LOGS_PATH="${PROJECT_ROOT}/logs"
|
||||
BACKUPS_PATH="${PROJECT_ROOT}/backups"
|
||||
UPDATES_PATH="${PROJECT_ROOT}/updates"
|
||||
|
||||
ADMIN_DOMAIN="$(ask "Admin domain" "$ADMIN_DOMAIN")"
|
||||
WIDGET_DOMAIN="$(ask "Widget domain" "$WIDGET_DOMAIN")"
|
||||
API_DOMAIN="$(ask "API domain" "$API_DOMAIN")"
|
||||
ADMIN_WEBROOT="$(ask "Admin FastPanel webroot, leave empty to skip publishing" "$ADMIN_WEBROOT")"
|
||||
WIDGET_WEBROOT="$(ask "Widget FastPanel webroot, leave empty to skip publishing" "$WIDGET_WEBROOT")"
|
||||
TELEGRAM_BOT_TOKEN="$(ask_secret "Telegram bot token, leave empty for now")"
|
||||
JWT_SECRET="$(ask "JWT secret" "$(generate_secret)")"
|
||||
|
||||
validate_fastpanel_path "Admin" "$ADMIN_WEBROOT"
|
||||
validate_fastpanel_path "Widget" "$WIDGET_WEBROOT"
|
||||
print_summary
|
||||
read -r -p "Continue installation? [Y/n]: " confirm
|
||||
if [[ "$confirm" =~ ^[Nn]$ ]]; then
|
||||
warn "Installation cancelled."
|
||||
exit 0
|
||||
fi
|
||||
|
||||
current_step "Install base packages"
|
||||
install_packages
|
||||
|
||||
current_step "Install Node.js"
|
||||
install_node
|
||||
|
||||
current_step "Install PM2"
|
||||
install_pm2
|
||||
|
||||
current_step "Create WSChat directories"
|
||||
mkdir -p "$PROJECT_ROOT" "$DATA_PATH" "$LOGS_PATH" "$BACKUPS_PATH" "$UPDATES_PATH"
|
||||
ok "Directories created under $PROJECT_ROOT"
|
||||
|
||||
current_step "Clone or update repository"
|
||||
clone_or_update_repo
|
||||
|
||||
current_step "Install project dependencies"
|
||||
install_dependencies
|
||||
|
||||
current_step "Write backend .env"
|
||||
write_backend_env
|
||||
write_install_state
|
||||
ok "Backend env written to $SOURCE_PATH/backend/.env"
|
||||
ok "Install state written to $PROJECT_ROOT/install-state.env"
|
||||
|
||||
current_step "Start backend with PM2"
|
||||
start_backend_pm2
|
||||
|
||||
current_step "Check backend health"
|
||||
check_backend
|
||||
|
||||
current_step "Build admin and widget"
|
||||
build_frontend
|
||||
|
||||
current_step "Publish static files if webroots are configured"
|
||||
publish_static_if_configured
|
||||
|
||||
current_step "Print FastPanel proxy instructions"
|
||||
cat <<EOF | tee -a "$LOG_FILE"
|
||||
|
||||
Create/configure sites manually in FastPanel:
|
||||
- https://${ADMIN_DOMAIN}
|
||||
- https://${WIDGET_DOMAIN}
|
||||
- https://${API_DOMAIN}
|
||||
|
||||
Configure ${API_DOMAIN} as reverse proxy to:
|
||||
http://${BACKEND_HOST}:${BACKEND_PORT}
|
||||
|
||||
WebSocket path /ws must support Upgrade headers.
|
||||
|
||||
Typical Nginx locations:
|
||||
|
||||
location /ws {
|
||||
proxy_pass http://${BACKEND_HOST}:${BACKEND_PORT}/ws;
|
||||
proxy_http_version 1.1;
|
||||
proxy_set_header Upgrade \$http_upgrade;
|
||||
proxy_set_header Connection "upgrade";
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
}
|
||||
|
||||
location / {
|
||||
proxy_pass http://${BACKEND_HOST}:${BACKEND_PORT};
|
||||
proxy_set_header Host \$host;
|
||||
proxy_set_header X-Real-IP \$remote_addr;
|
||||
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto \$scheme;
|
||||
}
|
||||
|
||||
EOF
|
||||
|
||||
current_step "Finish"
|
||||
ok "WSChat backend installation finished."
|
||||
ok "Backend local health: http://${BACKEND_HOST}:${BACKEND_PORT}/health"
|
||||
ok "PM2 process: ${PM2_PROCESS_NAME}"
|
||||
ok "Log file: ${LOG_FILE}"
|
||||
warn "Next: configure api domain proxy in FastPanel, then check https://${API_DOMAIN}/health"
|
||||
}
|
||||
|
||||
main "$@"
|
||||
Ссылка в новой задаче
Block a user
© 2026 StackWorks