235 lines
7.1 KiB
Bash
235 lines
7.1 KiB
Bash
#!/bin/bash
|
|
# Veza V5 Ultra Deployment Script
|
|
# Deploys Veza using Ansible + Incus/OVN + HAProxy-in-container + Let's Encrypt
|
|
|
|
set -euo pipefail
|
|
|
|
# Colors for output
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m' # No Color
|
|
|
|
# Configuration
|
|
INVENTORY="ansible/inventory/prod/hosts.yml"
|
|
DOMAIN="veza.talas.fr"
|
|
ACME_EMAIL="ops@talas.fr"
|
|
TARGET_HOST="192.168.0.12"
|
|
|
|
# Functions
|
|
log_info() {
|
|
echo -e "${BLUE}[INFO]${NC} $1"
|
|
}
|
|
|
|
log_success() {
|
|
echo -e "${GREEN}[SUCCESS]${NC} $1"
|
|
}
|
|
|
|
log_warning() {
|
|
echo -e "${YELLOW}[WARNING]${NC} $1"
|
|
}
|
|
|
|
log_error() {
|
|
echo -e "${RED}[ERROR]${NC} $1"
|
|
}
|
|
|
|
check_prerequisites() {
|
|
log_info "Checking prerequisites..."
|
|
|
|
# Check if ansible is installed
|
|
if ! command -v ansible-playbook &> /dev/null; then
|
|
log_error "ansible-playbook is not installed. Please install Ansible first."
|
|
exit 1
|
|
fi
|
|
|
|
# Check if inventory file exists
|
|
if [[ ! -f "$INVENTORY" ]]; then
|
|
log_error "Inventory file $INVENTORY not found!"
|
|
exit 1
|
|
fi
|
|
|
|
# Check if playbooks exist
|
|
for playbook in ansible/playbooks/00-bootstrap-remote.yml ansible/playbooks/10-incus-ovn.yml ansible/playbooks/20-incus-containers.yml ansible/playbooks/30-haproxy-in-container.yml ansible/playbooks/40-veza-apps.yml ansible/playbooks/50-smoke.yml; do
|
|
if [[ ! -f "$playbook" ]]; then
|
|
log_error "Playbook $playbook not found!"
|
|
exit 1
|
|
fi
|
|
done
|
|
|
|
# Check SSH connectivity
|
|
log_info "Testing SSH connectivity to $TARGET_HOST..."
|
|
if ! ssh -o ConnectTimeout=10 -o BatchMode=yes senke@$TARGET_HOST "echo 'SSH connection successful'" &> /dev/null; then
|
|
log_error "Cannot connect to $TARGET_HOST via SSH. Please check your SSH key and connectivity."
|
|
exit 1
|
|
fi
|
|
|
|
log_success "Prerequisites check passed!"
|
|
}
|
|
|
|
run_playbook() {
|
|
local playbook="$1"
|
|
local description="$2"
|
|
local extra_vars="$3"
|
|
|
|
log_info "Running: $description"
|
|
log_info "Playbook: $playbook"
|
|
|
|
if [[ -n "$extra_vars" ]]; then
|
|
log_info "Extra vars: $extra_vars"
|
|
ansible-playbook -i "$INVENTORY" "$playbook" -e "$extra_vars" -v
|
|
else
|
|
ansible-playbook -i "$INVENTORY" "$playbook" -v
|
|
fi
|
|
|
|
if [[ $? -eq 0 ]]; then
|
|
log_success "$description completed successfully!"
|
|
else
|
|
log_error "$description failed!"
|
|
exit 1
|
|
fi
|
|
}
|
|
|
|
deploy_veza() {
|
|
log_info "Starting Veza V5 Ultra deployment..."
|
|
log_info "Target host: $TARGET_HOST"
|
|
log_info "Domain: $DOMAIN"
|
|
log_info "ACME Email: $ACME_EMAIL"
|
|
echo
|
|
|
|
# Step 1: Bootstrap remote host
|
|
run_playbook "ansible/playbooks/00-bootstrap-remote.yml" "Bootstrap Debian host"
|
|
echo
|
|
|
|
# Step 2: Install Incus + OVN
|
|
run_playbook "ansible/playbooks/10-incus-ovn.yml" "Install Incus + OVN single-host"
|
|
echo
|
|
|
|
# Step 3: Create containers
|
|
run_playbook "ansible/playbooks/20-incus-containers.yml" "Create Incus containers"
|
|
echo
|
|
|
|
# Step 4: Configure HAProxy + ACME
|
|
run_playbook "ansible/playbooks/30-haproxy-in-container.yml" "Configure HAProxy + ACME" "domain=$DOMAIN acme_email=$ACME_EMAIL"
|
|
echo
|
|
|
|
# Step 5: Deploy applications
|
|
run_playbook "ansible/playbooks/40-veza-apps.yml" "Deploy Veza applications"
|
|
echo
|
|
|
|
# Step 6: Run smoke tests
|
|
run_playbook "ansible/playbooks/50-smoke.yml" "Run smoke tests"
|
|
echo
|
|
|
|
log_success "Veza V5 Ultra deployment completed successfully!"
|
|
echo
|
|
log_info "Next steps:"
|
|
log_info "1. Point DNS A record for $DOMAIN to $TARGET_HOST"
|
|
log_info "2. Re-run HAProxy playbook to get Let's Encrypt certificate:"
|
|
log_info " ansible-playbook -i $INVENTORY ansible/playbooks/30-haproxy-in-container.yml -e domain=$DOMAIN -e acme_email=$ACME_EMAIL"
|
|
log_info "3. Test full functionality with real domain"
|
|
echo
|
|
log_info "Access URLs:"
|
|
log_info "- HTTP: http://$TARGET_HOST/"
|
|
log_info "- HTTPS: https://$TARGET_HOST/ (self-signed cert until DNS is configured)"
|
|
log_info "- API: https://$TARGET_HOST/api/"
|
|
log_info "- WS: wss://$TARGET_HOST/ws/"
|
|
log_info "- Stream: https://$TARGET_HOST/stream/"
|
|
}
|
|
|
|
show_help() {
|
|
echo "Veza V5 Ultra Deployment Script"
|
|
echo
|
|
echo "Usage: $0 [OPTIONS]"
|
|
echo
|
|
echo "Options:"
|
|
echo " -h, --help Show this help message"
|
|
echo " -d, --domain DOMAIN Set domain (default: $DOMAIN)"
|
|
echo " -e, --email EMAIL Set ACME email (default: $ACME_EMAIL)"
|
|
echo " -t, --target HOST Set target host (default: $TARGET_HOST)"
|
|
echo " --bootstrap-only Run only bootstrap playbook"
|
|
echo " --infra-only Run bootstrap + infrastructure playbooks"
|
|
echo " --apps-only Run only applications playbook"
|
|
echo " --test-only Run only smoke tests"
|
|
echo
|
|
echo "Examples:"
|
|
echo " $0 # Full deployment"
|
|
echo " $0 -d myapp.example.com -e admin@example.com # Custom domain and email"
|
|
echo " $0 --bootstrap-only # Only bootstrap the host"
|
|
echo " $0 --infra-only # Only setup infrastructure"
|
|
}
|
|
|
|
# Parse command line arguments
|
|
BOOTSTRAP_ONLY=false
|
|
INFRA_ONLY=false
|
|
APPS_ONLY=false
|
|
TEST_ONLY=false
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
-h|--help)
|
|
show_help
|
|
exit 0
|
|
;;
|
|
-d|--domain)
|
|
DOMAIN="$2"
|
|
shift 2
|
|
;;
|
|
-e|--email)
|
|
ACME_EMAIL="$2"
|
|
shift 2
|
|
;;
|
|
-t|--target)
|
|
TARGET_HOST="$2"
|
|
shift 2
|
|
;;
|
|
--bootstrap-only)
|
|
BOOTSTRAP_ONLY=true
|
|
shift
|
|
;;
|
|
--infra-only)
|
|
INFRA_ONLY=true
|
|
shift
|
|
;;
|
|
--apps-only)
|
|
APPS_ONLY=true
|
|
shift
|
|
;;
|
|
--test-only)
|
|
TEST_ONLY=true
|
|
shift
|
|
;;
|
|
*)
|
|
log_error "Unknown option: $1"
|
|
show_help
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
# Main execution
|
|
main() {
|
|
log_info "Veza V5 Ultra Deployment Script"
|
|
log_info "================================"
|
|
echo
|
|
|
|
check_prerequisites
|
|
|
|
if [[ "$BOOTSTRAP_ONLY" == true ]]; then
|
|
run_playbook "ansible/playbooks/00-bootstrap-remote.yml" "Bootstrap Debian host"
|
|
elif [[ "$INFRA_ONLY" == true ]]; then
|
|
run_playbook "ansible/playbooks/00-bootstrap-remote.yml" "Bootstrap Debian host"
|
|
run_playbook "ansible/playbooks/10-incus-ovn.yml" "Install Incus + OVN single-host"
|
|
run_playbook "ansible/playbooks/20-incus-containers.yml" "Create Incus containers"
|
|
run_playbook "ansible/playbooks/30-haproxy-in-container.yml" "Configure HAProxy + ACME" "domain=$DOMAIN acme_email=$ACME_EMAIL"
|
|
elif [[ "$APPS_ONLY" == true ]]; then
|
|
run_playbook "ansible/playbooks/40-veza-apps.yml" "Deploy Veza applications"
|
|
elif [[ "$TEST_ONLY" == true ]]; then
|
|
run_playbook "ansible/playbooks/50-smoke.yml" "Run smoke tests"
|
|
else
|
|
deploy_veza
|
|
fi
|
|
}
|
|
|
|
# Run main function
|
|
main "$@"
|