Files
geointel/scripts/deploy_tower.ps1
T
Codex 5699006a5e
GeoIntel CI / docs-smoke (push) Canceled after 0s
GeoIntel CI / contract-smoke (push) Canceled after 0s
Harden immutable release deployment
2026-07-18 02:31:28 +02:00

76 lines
2.5 KiB
PowerShell

param(
[string]$RemoteHost = "root@192.168.10.150",
[string]$RemotePath = "/mnt/user/appdata/geointel",
[string]$RemoteBranch = "main",
[string]$RemoteRepo = "gitea-widefrog:NuklearRabbit/geointel.git",
[string]$SshKey = "$HOME/.ssh/widefrog_unraid_deploy",
[string]$FrontendUrl = "http://192.168.10.150:1202",
[string]$InstallAi = $(if ($env:GEOINTEL_INSTALL_AI) { $env:GEOINTEL_INSTALL_AI } else { "" }),
[switch]$Bootstrap
)
$ErrorActionPreference = "Stop"
$bootstrapValue = if ($Bootstrap) { "1" } else { "0" }
$remoteScript = @'
set -euo pipefail
git config --global --add safe.directory "$REMOTE_PATH"
cd "$REMOTE_PATH"
if [ ! -d .git ]; then
if [ "$DEPLOY_BOOTSTRAP" != '1' ]; then
echo "No git checkout found in $REMOTE_PATH."
echo 'Re-run with -Bootstrap for the first deployment bootstrap.'
exit 2
fi
git init
git remote add origin "$REMOTE_REPO"
fi
git remote get-url origin >/dev/null 2>&1 || git remote add origin "$REMOTE_REPO"
git fetch origin "$REMOTE_BRANCH"
git reset --hard "origin/$REMOTE_BRANCH"
git branch -M "$REMOTE_BRANCH"
chmod +x scripts/*.sh backend/docker_start.sh deploy/unraid/*.sh || true
FRONTEND_URL="$FRONTEND_URL" \
DEPLOY_GEOINTEL_INSTALL_AI="${DEPLOY_GEOINTEL_INSTALL_AI:-}" \
bash deploy/unraid/deploy-release.sh
'@
$utf8NoBom = [System.Text.UTF8Encoding]::new($false)
$localScriptPath = [System.IO.Path]::GetTempFileName()
$remoteScriptPath = "/tmp/geointel-deploy-$([System.Guid]::NewGuid().ToString('N')).sh"
try {
[System.IO.File]::WriteAllText($localScriptPath, $remoteScript, $utf8NoBom)
$scpArgs = @(
"-o", "BatchMode=yes",
"-o", "StrictHostKeyChecking=accept-new",
"-i", $SshKey,
$localScriptPath,
"${RemoteHost}:$remoteScriptPath"
)
& scp @scpArgs
if ($LASTEXITCODE -ne 0) {
exit $LASTEXITCODE
}
$remoteRunCommand = "REMOTE_PATH='$RemotePath' REMOTE_BRANCH='$RemoteBranch' REMOTE_REPO='$RemoteRepo' FRONTEND_URL='$FrontendUrl' DEPLOY_BOOTSTRAP='$bootstrapValue' DEPLOY_GEOINTEL_INSTALL_AI='$InstallAi' bash '$remoteScriptPath'; status=`$?; rm -f '$remoteScriptPath'; exit `$status"
$sshRunArgs = @(
"-o", "BatchMode=yes",
"-o", "StrictHostKeyChecking=accept-new",
"-i", $SshKey,
$RemoteHost,
$remoteRunCommand
)
& ssh @sshRunArgs
if ($LASTEXITCODE -ne 0) {
exit $LASTEXITCODE
}
} finally {
Remove-Item -LiteralPath $localScriptPath -Force -ErrorAction SilentlyContinue
}