Achmad Setyabudi Susilo
3d99940658
Sandbox Deployment Platform — Go control plane + agents, NextJS dashboard, nginx reverse proxy. Cross-compile via Docker; deploy via sshpass to 172.18.136.92 (micro) and 172.18.139.186 (gateway). - control-plane: HTTP API, WS hub, SQLite (modernc.org/sqlite) for progress, .log files for log persistence - agent-micro / agent-gateway: alpine:3.20 + bind-mounted repo, binary exec'd in container, no Dockerfile build step - dashboard: NextJS static export + shadcn/ui components, single WebSocket hook - docker-compose.yml: three services on alpine:latest with docker socket bind for agents - scripts/: build.sh (golang:1.23-alpine cross-compile), deploy.sh, patch-nginx.sh (idempotent nginx splice), ssh wrappers Runtime model: pass-through Bitbucket creds per deploy, never logged or persisted on the agent. Control plane never touches git or docker directly — agents do all the work locally.
105 lines
2.6 KiB
Bash
Executable File
105 lines
2.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Splice the SDP dashboard location into the existing nginx default site on
|
|
# 172.18.139.186. Idempotent: re-running won't duplicate the block.
|
|
#
|
|
# We don't replace the file — we insert before the closing `}` of the
|
|
# existing `server { ... }` block. The block is guarded by a sentinel
|
|
# comment so subsequent runs are no-ops.
|
|
|
|
set -euo pipefail
|
|
cd "$(dirname "$0")/.."
|
|
|
|
HOST_186="${SDP_186_HOST:-administrator@172.18.139.186}"
|
|
PASS_186="${SDP_186_PASS:-Bre@kthrough2312}"
|
|
|
|
if ! command -v sshpass >/dev/null 2>&1; then
|
|
echo "sshpass not found. Install with: brew install sshpass" >&2
|
|
exit 1
|
|
fi
|
|
|
|
SSH="sshpass -p $PASS_186 ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=ERROR"
|
|
|
|
NGINX_SITE=/etc/nginx/sites-available/default
|
|
SDP_MARKER='# >>> sdp >>>'
|
|
|
|
$SSH "$HOST_186" bash -s <<REMOTE
|
|
set -e
|
|
NGINX_SITE=$NGINX_SITE
|
|
SDP_MARKER='$SDP_MARKER'
|
|
|
|
if grep -qF "\$SDP_MARKER" "\$NGINX_SITE"; then
|
|
echo "sdp block already present, skipping"
|
|
exit 0
|
|
fi
|
|
|
|
cp "\$NGINX_SITE" "\$NGINX_SITE.bak.\$(date +%s)"
|
|
|
|
python3 - <<'PY'
|
|
import re
|
|
path = "/etc/nginx/sites-available/default"
|
|
src = open(path).read()
|
|
block = """
|
|
\t# >>> sdp >>>
|
|
\t# Sandbox Deployment Platform dashboard
|
|
\tlocation /api/ {
|
|
\t\tproxy_pass http://127.0.0.1:8080;
|
|
\t\tproxy_set_header Host $host;
|
|
\t\tproxy_set_header X-Real-IP $remote_addr;
|
|
\t\tproxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
\t}
|
|
|
|
\tlocation /ws/ {
|
|
\t\tproxy_pass http://127.0.0.1:8080;
|
|
\t\tproxy_http_version 1.1;
|
|
\t\tproxy_set_header Upgrade $http_upgrade;
|
|
\t\tproxy_set_header Connection "upgrade";
|
|
\t\tproxy_read_timeout 3600s;
|
|
\t\tproxy_send_timeout 3600s;
|
|
\t}
|
|
|
|
\tlocation / {
|
|
\t\troot /home/administrator/SDP/dashboard;
|
|
\t\tindex index.html;
|
|
\t\ttry_files \$uri \$uri/ \$uri.html /index.html;
|
|
\t}
|
|
\t# <<< sdp <<<
|
|
"""
|
|
|
|
def find_server_end(s):
|
|
i = s.find("server")
|
|
if i < 0: return -1
|
|
j = s.find("{", i)
|
|
if j < 0: return -1
|
|
depth = 1
|
|
k = j + 1
|
|
in_str = None
|
|
while k < len(s):
|
|
c = s[k]
|
|
if in_str:
|
|
if c == in_str and s[k-1] != "\\":
|
|
in_str = None
|
|
else:
|
|
if c in ('"', "'"):
|
|
in_str = c
|
|
elif c == "{":
|
|
depth += 1
|
|
elif c == "}":
|
|
depth -= 1
|
|
if depth == 0:
|
|
return k
|
|
k += 1
|
|
return -1
|
|
|
|
end = find_server_end(src)
|
|
if end < 0:
|
|
raise SystemExit("could not find server block end")
|
|
|
|
new = src[:end] + block + src[end:]
|
|
open(path, "w").write(new)
|
|
PY
|
|
|
|
nginx -t
|
|
systemctl reload nginx
|
|
echo "nginx patched and reloaded"
|
|
REMOTE
|