f7855d47e4
- scripts/deploy-cvm.sh: backup remote server.ts -> upload -> restart -> confirm the heartbeat, with --rollback. Host/SSH values come from the never-committed ~/.config/skatespots/cvm.env (or CVM_HOST), so no host details ever enter this public repo. - package.json: add `npm run deploy:cvm`. - AGENTS.md: record that the CVM server runs on ONE external host (deploy via deploy:cvm) and that the discovery relay, not the server, is the SPOF.
55 lines
2.2 KiB
Bash
Executable file
55 lines
2.2 KiB
Bash
Executable file
#!/usr/bin/env bash
|
|
#
|
|
# Deploy the standalone CVM (ContextVM) server to its host.
|
|
#
|
|
# The host is intentionally NOT committed — this repository is public. Provide it
|
|
# via either:
|
|
# • ~/.config/skatespots/cvm.env (contains: CVM_HOST=ubuntu@your-host), or
|
|
# • an environment variable:
|
|
# CVM_HOST=ubuntu@your-host npm run deploy:cvm
|
|
#
|
|
# Optional overrides (env or ~/.config/skatespots/cvm.env):
|
|
# CVM_SSH_KEY SSH private key (default: ~/.ssh/skatespots-new)
|
|
# CVM_DIR Remote checkout dir (default: /home/ubuntu/skatespots-cvm)
|
|
# CVM_SERVICE systemd unit name (default: skatespots-cvm)
|
|
#
|
|
# Usage:
|
|
# npm run deploy:cvm
|
|
# bash scripts/deploy-cvm.sh --rollback # restore the newest remote backup
|
|
set -euo pipefail
|
|
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
|
|
# Load the local, never-committed config if present.
|
|
CONF="${HOME}/.config/skatespots/cvm.env"
|
|
if [[ -f "$CONF" ]]; then
|
|
# shellcheck disable=SC1090
|
|
source "$CONF"
|
|
fi
|
|
|
|
: "${CVM_HOST:?Set CVM_HOST (e.g. in ~/.config/skatespots/cvm.env) — the host is never committed}"
|
|
CVM_SSH_KEY="${CVM_SSH_KEY:-$HOME/.ssh/skatespots-new}"
|
|
CVM_DIR="${CVM_DIR:-/home/ubuntu/skatespots-cvm}"
|
|
CVM_SERVICE="${CVM_SERVICE:-skatespots-cvm}"
|
|
|
|
SSH=(ssh -i "$CVM_SSH_KEY" -o BatchMode=yes -o ConnectTimeout=12 "$CVM_HOST")
|
|
|
|
if [[ "${1:-}" == "--rollback" ]]; then
|
|
echo "→ Rolling back to the newest backup on the host"
|
|
"${SSH[@]}" "LATEST=\$(ls -1t $CVM_DIR/server.ts.bak-* | head -1); cp \"\$LATEST\" $CVM_DIR/server.ts; sudo systemctl restart $CVM_SERVICE && echo \"restored: \$LATEST\""
|
|
exit 0
|
|
fi
|
|
|
|
echo "→ Backing up the remote server.ts"
|
|
"${SSH[@]}" "cp $CVM_DIR/server.ts $CVM_DIR/server.ts.bak-\$(date +%Y%m%d-%H%M%S)"
|
|
|
|
echo "→ Uploading cvm-server/server.ts"
|
|
scp -i "$CVM_SSH_KEY" -o BatchMode=yes "$REPO_ROOT/cvm-server/server.ts" "$CVM_HOST:$CVM_DIR/server.ts"
|
|
|
|
echo "→ Restarting $CVM_SERVICE"
|
|
"${SSH[@]}" "sudo systemctl restart $CVM_SERVICE && sleep 10 && echo \"active: \$(systemctl is-active $CVM_SERVICE)\""
|
|
|
|
echo "→ Recent log:"
|
|
"${SSH[@]}" "journalctl -u $CVM_SERVICE -n 25 --no-pager | grep -E 'Heartbeat|Server running|Data relays|CVM relay' || true"
|
|
|
|
echo "✅ CVM server deployed."
|