487 lines
14 KiB
Bash
487 lines
14 KiB
Bash
#!/bin/bash
|
|
#
|
|
# RWA Backend Services - Deployment Script
|
|
# =========================================
|
|
#
|
|
# Usage:
|
|
# ./deploy.sh install # First time setup (generate secrets, init databases)
|
|
# ./deploy.sh up # Start all services
|
|
# ./deploy.sh down # Stop all services
|
|
# ./deploy.sh restart # Restart all services
|
|
# ./deploy.sh status # Show service status
|
|
# ./deploy.sh logs [svc] # View logs (optional: specific service)
|
|
# ./deploy.sh build # Rebuild all images
|
|
# ./deploy.sh migrate # Run database migrations
|
|
# ./deploy.sh health # Check health of all services
|
|
#
|
|
|
|
set -e
|
|
|
|
# ===========================================================================
|
|
# Configuration
|
|
# ===========================================================================
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
ENV_FILE="$SCRIPT_DIR/.env"
|
|
COMPOSE_FILE="$SCRIPT_DIR/docker-compose.yml"
|
|
|
|
# Colors
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m'
|
|
|
|
log_info() { echo -e "${GREEN}[INFO]${NC} $1"; }
|
|
log_warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
|
log_error() { echo -e "${RED}[ERROR]${NC} $1"; }
|
|
log_step() { echo -e "${BLUE}[STEP]${NC} $1"; }
|
|
|
|
# ===========================================================================
|
|
# Helper Functions
|
|
# ===========================================================================
|
|
|
|
generate_random_password() {
|
|
openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | head -c 32
|
|
}
|
|
|
|
generate_hex_key() {
|
|
openssl rand -hex 32
|
|
}
|
|
|
|
check_docker() {
|
|
if ! command -v docker &> /dev/null; then
|
|
log_error "Docker is not installed. Please install Docker first."
|
|
exit 1
|
|
fi
|
|
|
|
if ! docker compose version &> /dev/null; then
|
|
log_error "Docker Compose is not installed. Please install Docker Compose first."
|
|
exit 1
|
|
fi
|
|
|
|
log_info "Docker version: $(docker --version)"
|
|
log_info "Docker Compose version: $(docker compose version --short)"
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Install / Initialize
|
|
# ===========================================================================
|
|
|
|
install() {
|
|
log_step "Installing RWA Backend Services..."
|
|
|
|
check_docker
|
|
|
|
# Generate .env file if not exists
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
log_step "Generating secure configuration..."
|
|
|
|
POSTGRES_PASSWORD=$(generate_random_password)
|
|
JWT_SECRET=$(generate_random_password)
|
|
SERVICE_JWT_SECRET=$(generate_random_password)
|
|
WALLET_ENCRYPTION_SALT=$(generate_random_password)
|
|
BACKUP_ENCRYPTION_KEY=$(generate_hex_key)
|
|
SHARE_MASTER_KEY=$(generate_hex_key)
|
|
|
|
cat > "$ENV_FILE" << EOF
|
|
# =============================================================================
|
|
# RWA Backend Services - Production Environment Configuration
|
|
# =============================================================================
|
|
# Generated: $(date)
|
|
# WARNING: Keep this file secure! Do not commit to version control!
|
|
# =============================================================================
|
|
|
|
# PostgreSQL Database
|
|
POSTGRES_USER=rwa_user
|
|
POSTGRES_PASSWORD=${POSTGRES_PASSWORD}
|
|
|
|
# Redis (leave empty for no password)
|
|
REDIS_PASSWORD=
|
|
|
|
# JWT Configuration
|
|
JWT_SECRET=${JWT_SECRET}
|
|
|
|
# Service-to-Service Authentication
|
|
SERVICE_JWT_SECRET=${SERVICE_JWT_SECRET}
|
|
|
|
# Wallet Encryption
|
|
WALLET_ENCRYPTION_SALT=${WALLET_ENCRYPTION_SALT}
|
|
|
|
# Backup Encryption (256-bit hex key)
|
|
BACKUP_ENCRYPTION_KEY=${BACKUP_ENCRYPTION_KEY}
|
|
|
|
# MPC Share Master Key (256-bit hex key)
|
|
SHARE_MASTER_KEY=${SHARE_MASTER_KEY}
|
|
|
|
# MPC System Address (on 192.168.1.100)
|
|
MPC_COORDINATOR_URL=http://192.168.1.100:8081
|
|
MPC_MESSAGE_ROUTER_URL=ws://192.168.1.100:8082
|
|
EOF
|
|
|
|
chmod 600 "$ENV_FILE"
|
|
log_info "Environment file created: $ENV_FILE"
|
|
log_info "Secrets have been auto-generated"
|
|
else
|
|
log_info "Environment file already exists: $ENV_FILE"
|
|
fi
|
|
|
|
# Create scripts directory
|
|
mkdir -p "$SCRIPT_DIR/scripts"
|
|
|
|
# Create database init script
|
|
create_db_init_script
|
|
|
|
log_info "Installation complete!"
|
|
log_info ""
|
|
log_info "Next steps:"
|
|
log_info " 1. Review and edit .env if needed"
|
|
log_info " 2. Run: ./deploy.sh build"
|
|
log_info " 3. Run: ./deploy.sh up"
|
|
}
|
|
|
|
create_db_init_script() {
|
|
cat > "$SCRIPT_DIR/scripts/init-databases.sh" << 'DBSCRIPT'
|
|
#!/bin/bash
|
|
set -e
|
|
|
|
# Function to create database if not exists
|
|
create_database() {
|
|
local database=$1
|
|
echo "Creating database: $database"
|
|
psql -v ON_ERROR_STOP=1 --username "$POSTGRES_USER" <<-EOSQL
|
|
SELECT 'CREATE DATABASE $database'
|
|
WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = '$database')\gexec
|
|
EOSQL
|
|
}
|
|
|
|
# Create all required databases
|
|
for db in rwa_identity rwa_wallet rwa_mpc rwa_backup rwa_planting rwa_referral rwa_reward rwa_leaderboard rwa_reporting rwa_authorization; do
|
|
create_database "$db"
|
|
done
|
|
|
|
echo "All databases created successfully!"
|
|
DBSCRIPT
|
|
|
|
chmod +x "$SCRIPT_DIR/scripts/init-databases.sh"
|
|
log_info "Database init script created"
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Docker Compose Operations
|
|
# ===========================================================================
|
|
|
|
up() {
|
|
log_step "Starting RWA Backend Services..."
|
|
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
log_error "Environment file not found. Run './deploy.sh install' first."
|
|
exit 1
|
|
fi
|
|
|
|
# Start infrastructure first
|
|
log_info "Starting infrastructure services..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d postgres redis zookeeper kafka
|
|
|
|
# Wait for infrastructure
|
|
log_info "Waiting for infrastructure to be ready..."
|
|
sleep 10
|
|
|
|
# Start application services
|
|
log_info "Starting application services..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d
|
|
|
|
log_info "All services started!"
|
|
log_info ""
|
|
log_info "Check status with: ./deploy.sh status"
|
|
log_info "View logs with: ./deploy.sh logs"
|
|
}
|
|
|
|
down() {
|
|
log_step "Stopping RWA Backend Services..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" down
|
|
log_info "All services stopped"
|
|
}
|
|
|
|
restart() {
|
|
log_step "Restarting RWA Backend Services..."
|
|
down
|
|
sleep 3
|
|
up
|
|
}
|
|
|
|
build() {
|
|
log_step "Building Docker images..."
|
|
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
log_error "Environment file not found. Run './deploy.sh install' first."
|
|
exit 1
|
|
fi
|
|
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" build --parallel
|
|
log_info "All images built successfully"
|
|
}
|
|
|
|
build_no_cache() {
|
|
log_step "Building Docker images (no cache)..."
|
|
|
|
if [ ! -f "$ENV_FILE" ]; then
|
|
log_error "Environment file not found. Run './deploy.sh install' first."
|
|
exit 1
|
|
fi
|
|
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" build --no-cache --parallel
|
|
log_info "All images built successfully (no cache)"
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Status and Monitoring
|
|
# ===========================================================================
|
|
|
|
status() {
|
|
echo ""
|
|
echo "============================================"
|
|
echo "RWA Backend Services Status"
|
|
echo "============================================"
|
|
echo ""
|
|
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" ps
|
|
|
|
echo ""
|
|
echo "============================================"
|
|
echo "Service Health Check"
|
|
echo "============================================"
|
|
echo ""
|
|
|
|
health
|
|
}
|
|
|
|
health() {
|
|
local services=(
|
|
"identity-service:3000"
|
|
"wallet-service:3001"
|
|
"backup-service:3002"
|
|
"planting-service:3003"
|
|
"referral-service:3004"
|
|
"reward-service:3005"
|
|
"mpc-service:3006"
|
|
"leaderboard-service:3007"
|
|
"reporting-service:3008"
|
|
"authorization-service:3009"
|
|
"admin-service:3010"
|
|
)
|
|
|
|
for svc in "${services[@]}"; do
|
|
name="${svc%%:*}"
|
|
port="${svc##*:}"
|
|
|
|
if curl -s -o /dev/null -w "%{http_code}" "http://localhost:$port/health" 2>/dev/null | grep -q "200"; then
|
|
echo -e "${GREEN}[OK]${NC} $name (port $port)"
|
|
else
|
|
echo -e "${RED}[FAIL]${NC} $name (port $port)"
|
|
fi
|
|
done
|
|
|
|
echo ""
|
|
|
|
# Infrastructure health
|
|
echo "Infrastructure:"
|
|
|
|
if docker exec rwa-postgres pg_isready -U rwa_user &>/dev/null; then
|
|
echo -e " ${GREEN}[OK]${NC} PostgreSQL"
|
|
else
|
|
echo -e " ${RED}[FAIL]${NC} PostgreSQL"
|
|
fi
|
|
|
|
if docker exec rwa-redis redis-cli ping &>/dev/null; then
|
|
echo -e " ${GREEN}[OK]${NC} Redis"
|
|
else
|
|
echo -e " ${RED}[FAIL]${NC} Redis"
|
|
fi
|
|
|
|
if docker exec rwa-kafka kafka-topics --bootstrap-server localhost:9092 --list &>/dev/null; then
|
|
echo -e " ${GREEN}[OK]${NC} Kafka"
|
|
else
|
|
echo -e " ${RED}[FAIL]${NC} Kafka"
|
|
fi
|
|
}
|
|
|
|
logs() {
|
|
local service="$1"
|
|
|
|
if [ -n "$service" ]; then
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" logs -f "$service"
|
|
else
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" logs -f
|
|
fi
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Database Operations
|
|
# ===========================================================================
|
|
|
|
migrate() {
|
|
log_step "Running database migrations..."
|
|
|
|
local services=(
|
|
"identity-service"
|
|
"wallet-service"
|
|
"backup-service"
|
|
"planting-service"
|
|
"referral-service"
|
|
"reward-service"
|
|
"mpc-service"
|
|
"leaderboard-service"
|
|
"reporting-service"
|
|
"authorization-service"
|
|
)
|
|
|
|
for svc in "${services[@]}"; do
|
|
log_info "Running migrations for $svc..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" exec "$svc" npx prisma migrate deploy 2>/dev/null || \
|
|
log_warn "Migration skipped for $svc (no migrations or service not running)"
|
|
done
|
|
|
|
log_info "Migrations complete"
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Cleanup
|
|
# ===========================================================================
|
|
|
|
clean() {
|
|
log_warn "This will remove all containers, volumes, and images!"
|
|
read -p "Are you sure? (y/N): " confirm
|
|
|
|
if [ "$confirm" = "y" ] || [ "$confirm" = "Y" ]; then
|
|
log_step "Cleaning up..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" down -v --rmi all
|
|
log_info "Cleanup complete"
|
|
else
|
|
log_info "Cleanup cancelled"
|
|
fi
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Single Service Operations
|
|
# ===========================================================================
|
|
|
|
start_service() {
|
|
local service="$1"
|
|
if [ -z "$service" ]; then
|
|
log_error "Please specify a service name"
|
|
exit 1
|
|
fi
|
|
|
|
log_info "Starting $service..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d "$service"
|
|
}
|
|
|
|
stop_service() {
|
|
local service="$1"
|
|
if [ -z "$service" ]; then
|
|
log_error "Please specify a service name"
|
|
exit 1
|
|
fi
|
|
|
|
log_info "Stopping $service..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" stop "$service"
|
|
}
|
|
|
|
rebuild_service() {
|
|
local service="$1"
|
|
if [ -z "$service" ]; then
|
|
log_error "Please specify a service name"
|
|
exit 1
|
|
fi
|
|
|
|
log_info "Rebuilding $service..."
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" build "$service"
|
|
docker compose -f "$COMPOSE_FILE" --env-file "$ENV_FILE" up -d "$service"
|
|
}
|
|
|
|
# ===========================================================================
|
|
# Main
|
|
# ===========================================================================
|
|
|
|
case "${1:-}" in
|
|
install)
|
|
install
|
|
;;
|
|
up|start)
|
|
up
|
|
;;
|
|
down|stop)
|
|
down
|
|
;;
|
|
restart)
|
|
restart
|
|
;;
|
|
build)
|
|
build
|
|
;;
|
|
build-no-cache)
|
|
build_no_cache
|
|
;;
|
|
status|ps)
|
|
status
|
|
;;
|
|
health)
|
|
health
|
|
;;
|
|
logs)
|
|
logs "$2"
|
|
;;
|
|
migrate)
|
|
migrate
|
|
;;
|
|
clean)
|
|
clean
|
|
;;
|
|
start-svc)
|
|
start_service "$2"
|
|
;;
|
|
stop-svc)
|
|
stop_service "$2"
|
|
;;
|
|
rebuild-svc)
|
|
rebuild_service "$2"
|
|
;;
|
|
*)
|
|
echo "RWA Backend Services Deployment Script"
|
|
echo ""
|
|
echo "Usage: $0 <command> [options]"
|
|
echo ""
|
|
echo "Commands:"
|
|
echo " install - First time setup (generate secrets, create configs)"
|
|
echo " up/start - Start all services"
|
|
echo " down/stop - Stop all services"
|
|
echo " restart - Restart all services"
|
|
echo " build - Build all Docker images"
|
|
echo " build-no-cache - Build all images without cache"
|
|
echo " status/ps - Show service status"
|
|
echo " health - Check health of all services"
|
|
echo " logs [svc] - View logs (optionally for specific service)"
|
|
echo " migrate - Run database migrations"
|
|
echo " clean - Remove all containers, volumes, and images"
|
|
echo ""
|
|
echo "Single Service Commands:"
|
|
echo " start-svc <name> - Start a specific service"
|
|
echo " stop-svc <name> - Stop a specific service"
|
|
echo " rebuild-svc <name> - Rebuild and restart a specific service"
|
|
echo ""
|
|
echo "Services:"
|
|
echo " identity-service, wallet-service, backup-service, planting-service,"
|
|
echo " referral-service, reward-service, mpc-service, leaderboard-service,"
|
|
echo " reporting-service, authorization-service, admin-service"
|
|
echo ""
|
|
echo "Examples:"
|
|
echo " $0 install # First time setup"
|
|
echo " $0 build # Build images"
|
|
echo " $0 up # Start all services"
|
|
echo " $0 logs identity-service # View identity-service logs"
|
|
echo " $0 rebuild-svc mpc-service # Rebuild specific service"
|
|
echo ""
|
|
exit 1
|
|
;;
|
|
esac
|