9eabe0d699
- upgrade.sh/rollback.sh: backup→pull→rolling restart→healthcheck→auto-rollback - backup.sh/restore.sh: mysqldump+redis BGSAVE+config tar, SHA256 manifest, restore with checksum verification - healthcheck.sh: Docker/container/MySQL/Redis/HTTP/disk checks, JSON output to .deploy-state/ - doctor.sh: sanitized diagnostics archive, vendor API TCP connectivity, cert expiry - export-offline-bundle.sh: docker pull+save for all profile images, load-images.sh, SHA256 - configure.sh: interactive/non-interactive mode, MySQL/Redis mode selection, domain prompts - enable-service.sh: domain validation, docker pull + compose up, healthcheck - disable-service.sh: compose stop+rm, profile removal, render-config - renew-cert.sh: acme.sh/certbot, --dry-run, backup old cert, nginx reload on success - alert-webhook.sh: WeCom/DingTalk/Feishu webhook, message sanitization - bench.sh: ab/wrk/curl benchmark, JSON report with docker stats - rotate-secrets.sh: JWT and internal token rotation - vendor credential templates: push.env and store-submit.env with full credential comments - render-config.sh: auto-sync SDK URL env vars (SDK_FILE_SERVICE_URL, SDK_IM_API_URL, SDK_IM_WS_URL) - All scripts pass bash -n syntax check Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
55 行
2.0 KiB
Bash
可执行文件
55 行
2.0 KiB
Bash
可执行文件
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
ROOT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
. "$ROOT_DIR/scripts/lib.sh"
|
|
|
|
SERVICE="${1:-}"
|
|
[ -n "$SERVICE" ] || fail_json "XUQM_PRIVATE_1002" "service name is required (im|push|update|license)" "enable-service"
|
|
|
|
if [ ! -f "$ROOT_DIR/.env" ]; then
|
|
cp "$ROOT_DIR/.env.example" "$ROOT_DIR/.env"
|
|
fi
|
|
load_env
|
|
|
|
audit "enable-service" "STARTED" "$SERVICE"
|
|
progress "enable-service" "STARTED" "$SERVICE"
|
|
|
|
case "$SERVICE" in
|
|
im)
|
|
set_env_value "$ROOT_DIR/.env" "ENABLE_IM" "true"
|
|
[ -n "${IM_DOMAIN:-}" ] || fail_json "XUQM_PRIVATE_1003" "IM_DOMAIN must be set before enabling im" "enable-service"
|
|
;;
|
|
push)
|
|
set_env_value "$ROOT_DIR/.env" "ENABLE_PUSH" "true"
|
|
[ -n "${PUSH_DOMAIN:-}" ] || fail_json "XUQM_PRIVATE_1003" "PUSH_DOMAIN must be set before enabling push" "enable-service"
|
|
;;
|
|
update)
|
|
set_env_value "$ROOT_DIR/.env" "ENABLE_UPDATE" "true"
|
|
[ -n "${UPDATE_DOMAIN:-}" ] || fail_json "XUQM_PRIVATE_1003" "UPDATE_DOMAIN must be set before enabling update" "enable-service"
|
|
;;
|
|
license)
|
|
set_env_value "$ROOT_DIR/.env" "ENABLE_LICENSE" "true"
|
|
[ -n "${LICENSE_DOMAIN:-}" ] || fail_json "XUQM_PRIVATE_1003" "LICENSE_DOMAIN must be set before enabling license" "enable-service"
|
|
;;
|
|
*)
|
|
fail_json "XUQM_PRIVATE_1002" "unknown service: $SERVICE (valid: im push update license)" "enable-service"
|
|
;;
|
|
esac
|
|
|
|
NEW_PROFILES="$(add_profile "${COMPOSE_PROFILES:-base}" "$SERVICE")"
|
|
set_env_value "$ROOT_DIR/.env" "COMPOSE_PROFILES" "$NEW_PROFILES"
|
|
load_env
|
|
|
|
"$ROOT_DIR/scripts/render-config.sh"
|
|
|
|
# Pull and start the new service
|
|
COMPOSE_PROFILES="$NEW_PROFILES" compose pull "$SERVICE-service" 2>/dev/null || true
|
|
COMPOSE_PROFILES="$NEW_PROFILES" compose up -d "$SERVICE-service"
|
|
|
|
"$ROOT_DIR/scripts/healthcheck.sh"
|
|
|
|
audit "enable-service" "DONE" "$SERVICE profiles=$NEW_PROFILES"
|
|
progress "enable-service" "DONE" "$SERVICE"
|
|
printf 'Service enabled: %s\nActive profiles: %s\n' "$SERVICE" "$NEW_PROFILES"
|
