SHiNE-server/deploy/scripts/deploy_ui.sh

#!/usr/bin/env bash
set -euo pipefail

SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
ROOT_DIR="$(cd "$SCRIPT_DIR/../.." && pwd)"

SRC_DIR="$ROOT_DIR/shine-UI"
REMOTE_HOST="${REMOTE_HOST:?REMOTE_HOST is required, example: player@shineup.me}"
REMOTE_UI_DIR="${REMOTE_UI_DIR:?REMOTE_UI_DIR is required}"
EXPECTED_CADDY_UI_ROOT="${EXPECTED_CADDY_UI_ROOT:-$REMOTE_UI_DIR}"
ALLOW_CADDY_MISMATCH="${ALLOW_CADDY_MISMATCH:-0}"
EXPECTED_CADDY_SITE="${EXPECTED_CADDY_SITE:?EXPECTED_CADDY_SITE is required}"
TARGET_URL="${TARGET_URL:-https://${EXPECTED_CADDY_SITE}}"
DEPLOY_SERVER_LOGIN="${DEPLOY_SERVER_LOGIN:-}"
DEPLOY_SERVER_ADDRESS="${DEPLOY_SERVER_ADDRESS:-}"
DEPLOY_SOLANA_CLUSTER="${DEPLOY_SOLANA_CLUSTER:-}"
DEPLOY_SOLANA_ENDPOINT="${DEPLOY_SOLANA_ENDPOINT:-}"
DEPLOY_WEBPUSH_VAPID_PUBLIC="${DEPLOY_WEBPUSH_VAPID_PUBLIC:-}"
REQUIRE_BACKUP="${REQUIRE_BACKUP:-0}"
BACKUP_DIR="${BACKUP_DIR:-$ROOT_DIR/deploy/backup/archive}"
VERSION_FILE="$ROOT_DIR/VERSION.properties"
BUILD_VERSION="$(date -u +%Y%m%d%H%M%S)"
export BUILD_VERSION

if [[ "$REQUIRE_BACKUP" == "1" ]]; then
  if ! find "$BACKUP_DIR" -mindepth 2 -maxdepth 2 -name MANIFEST.txt -print -quit 2>/dev/null | grep -q .; then
    echo "ERROR: для production deploy сначала положите свежий бэкап в $BACKUP_DIR/<date>/MANIFEST.txt" >&2
    exit 1
  fi
fi

if [[ ! -f "$VERSION_FILE" ]]; then
  echo "ERROR: version file not found: $VERSION_FILE" >&2
  exit 1
fi

CLIENT_VERSION="$(sed -n "s/^client\\.version[[:space:]]*=[[:space:]]*//p" "$VERSION_FILE" | head -n 1 | tr -d '\r' | xargs)"
if [[ -z "$CLIENT_VERSION" ]]; then
  echo "ERROR: client.version is empty in $VERSION_FILE" >&2
  exit 1
fi
export CLIENT_VERSION

DEPLOY_SOLANA_CLUSTER_NORMALIZED="$DEPLOY_SOLANA_CLUSTER"
if [[ "$DEPLOY_SOLANA_CLUSTER_NORMALIZED" == "mainnet" ]]; then
  DEPLOY_SOLANA_CLUSTER_NORMALIZED="mainnet-beta"
fi

TMP_DIR="$(mktemp -d)"
cleanup() {
  rm -rf "$TMP_DIR"
}
trap cleanup EXIT

if [[ ! -d "$SRC_DIR" ]]; then
  echo "ERROR: source directory not found: $SRC_DIR" >&2
  exit 1
fi

echo "==> Preparing staged UI copy with build version: $BUILD_VERSION"
echo "==> Client version from $VERSION_FILE: $CLIENT_VERSION"
echo "==> Deploy target: $TARGET_URL ($REMOTE_UI_DIR)"
rsync -a "$SRC_DIR"/ "$TMP_DIR"/

DEPLOY_CONFIG_FILE="$TMP_DIR/js/deploy-config.js"
if [[ -f "$DEPLOY_CONFIG_FILE" ]]; then
  if [[ -n "$DEPLOY_SERVER_LOGIN" ]]; then
    perl -0pi -e "s/export const defaultServerLogin = '.*?';/export const defaultServerLogin = '$DEPLOY_SERVER_LOGIN';/s" "$DEPLOY_CONFIG_FILE"
  fi
  if [[ -n "$DEPLOY_SERVER_ADDRESS" ]]; then
    perl -0pi -e "s/export const defaultServerAddress = '.*?';/export const defaultServerAddress = '$DEPLOY_SERVER_ADDRESS';/s" "$DEPLOY_CONFIG_FILE"
  fi
  if [[ -n "$DEPLOY_SOLANA_CLUSTER_NORMALIZED" ]]; then
    perl -0pi -e "s/export const defaultSolanaCluster = '.*?';/export const defaultSolanaCluster = '$DEPLOY_SOLANA_CLUSTER_NORMALIZED';/s" "$DEPLOY_CONFIG_FILE"
  fi
if [[ -n "$DEPLOY_SOLANA_ENDPOINT" ]]; then
    perl -0pi -e "s|export const defaultSolanaEndpoint = '.*?';|export const defaultSolanaEndpoint = '$DEPLOY_SOLANA_ENDPOINT';|s" "$DEPLOY_CONFIG_FILE"
  fi
fi

INDEX_FILE="$TMP_DIR/index.html"
if [[ ! -f "$INDEX_FILE" ]]; then
  echo "ERROR: index.html not found in staged UI: $INDEX_FILE" >&2
  exit 1
fi

perl -0pi -e 's/window\.__SHINE_BUILD_HASH__\s*=\s*'\''[^'\'']*'\'';/window.__SHINE_BUILD_HASH__ = '\''$ENV{BUILD_VERSION}'\'';/' "$INDEX_FILE"
perl -0pi -e 's/window\.__SHINE_CLIENT_VERSION__\s*=\s*'\''[^'\'']*'\'';/window.__SHINE_CLIENT_VERSION__ = '\''$ENV{CLIENT_VERSION}'\'';/' "$INDEX_FILE"
if [[ -n "$DEPLOY_WEBPUSH_VAPID_PUBLIC" ]]; then
  export DEPLOY_WEBPUSH_VAPID_PUBLIC
  perl -0pi -e 's/window\.__SHINE_WEBPUSH_VAPID_PUBLIC_KEY__\s*=\s*'\''[^'\'']*'\'';/window.__SHINE_WEBPUSH_VAPID_PUBLIC_KEY__ = '\''$ENV{DEPLOY_WEBPUSH_VAPID_PUBLIC}'\'';/' "$INDEX_FILE"
fi

echo "==> Checking SSH connectivity to $REMOTE_HOST"
ssh -o BatchMode=yes -o ConnectTimeout=10 "$REMOTE_HOST" "echo SSH OK" >/dev/null

echo "==> Validating Caddy UI root"
CADDY_CONFIG_PATH="$(ssh "$REMOTE_HOST" "set -e; \
  exec_line=\$(systemctl show -p ExecStart caddy --value 2>/dev/null || true); \
  cfg=\$(printf '%s' \"\$exec_line\" | sed -n 's/.*--config \\([^ ]*\\).*/\\1/p' | head -n 1); \
  if [ -z \"\$cfg\" ]; then cfg=/etc/caddy/Caddyfile; fi; \
  printf '%s' \"\$cfg\"")"
ROOT_CHECK_OUTPUT="$(ssh "$REMOTE_HOST" "set -euo pipefail; \
  cfg='$CADDY_CONFIG_PATH'; \
  site='$EXPECTED_CADDY_SITE'; \
  sudo awk -v site=\"\$site\" '
    BEGIN { in_site=0; depth=0; root_line=\"\"; root_lineno=0; have_site=0; }
    {
      line=\$0;
      trimmed=line;
      sub(/^[[:space:]]+/, \"\", trimmed);
      sub(/[[:space:]]+$/, \"\", trimmed);

      if (!in_site) {
        if (trimmed ~ \"^\" site \"[[:space:]]*\\\\{\") {
          in_site=1;
          have_site=1;
          depth=1;
          next;
        }
      } else {
        if (trimmed ~ /^root[[:space:]]+\\*[[:space:]]+/ && root_line == \"\") {
          root_line=line;
          root_lineno=NR;
        }
        opens=gsub(/\\{/, \"{\", line);
        closes=gsub(/\\}/, \"}\", line);
        depth += (opens - closes);
        if (depth <= 0) {
          in_site=0;
        }
      }
    }
    END {
      if (!have_site) {
        print \"SITE_NOT_FOUND\";
        exit 0;
      }
      if (root_line == \"\") {
        print \"ROOT_NOT_FOUND\";
        exit 0;
      }
      print root_lineno \":\" root_line;
    }
  ' \"\$cfg\"")"

if [[ "$ROOT_CHECK_OUTPUT" == "SITE_NOT_FOUND" ]]; then
  echo "ERROR: Caddy site block not found: $EXPECTED_CADDY_SITE" >&2
  echo "Caddy config: $CADDY_CONFIG_PATH" >&2
  if [[ "$ALLOW_CADDY_MISMATCH" != "1" ]]; then
    echo "Set ALLOW_CADDY_MISMATCH=1 to bypass this check." >&2
    exit 1
  fi
  echo "WARN: proceeding due to ALLOW_CADDY_MISMATCH=1"
elif [[ "$ROOT_CHECK_OUTPUT" == "ROOT_NOT_FOUND" ]]; then
  echo "ERROR: root directive not found inside site block: $EXPECTED_CADDY_SITE" >&2
  echo "Caddy config: $CADDY_CONFIG_PATH" >&2
  if [[ "$ALLOW_CADDY_MISMATCH" != "1" ]]; then
    echo "Set ALLOW_CADDY_MISMATCH=1 to bypass this check." >&2
    exit 1
  fi
  echo "WARN: proceeding due to ALLOW_CADDY_MISMATCH=1"
elif [[ "$ROOT_CHECK_OUTPUT" != *"$EXPECTED_CADDY_UI_ROOT"* ]]; then
  echo "ERROR: Caddy root mismatch for site $EXPECTED_CADDY_SITE. Found: $ROOT_CHECK_OUTPUT" >&2
  echo "Caddy config: $CADDY_CONFIG_PATH" >&2
  echo "Expected path fragment: $EXPECTED_CADDY_UI_ROOT" >&2
  if [[ "$ALLOW_CADDY_MISMATCH" != "1" ]]; then
    echo "Set ALLOW_CADDY_MISMATCH=1 to bypass this check." >&2
    exit 1
  fi
  echo "WARN: proceeding due to ALLOW_CADDY_MISMATCH=1"
fi

echo "==> Preparing remote directory: $REMOTE_UI_DIR"
ssh "$REMOTE_HOST" "sudo mkdir -p '$REMOTE_UI_DIR'"

echo "==> Syncing staged files to $REMOTE_UI_DIR"
rsync -rlvz --delete --omit-dir-times --no-perms --no-owner --no-group \
  --rsync-path="sudo rsync" \
  "$TMP_DIR"/ "$REMOTE_HOST":"$REMOTE_UI_DIR"/

ssh "$REMOTE_HOST" "sudo find '$REMOTE_UI_DIR' -type d -exec chmod o+rx {} +; sudo find '$REMOTE_UI_DIR' -type f -exec chmod o+r {} +"

echo "Всё хорошо: $TARGET_URL"