128 lines
6.4 KiB
Bash
128 lines
6.4 KiB
Bash
#!/usr/bin/env bash
|
|
# deploy.sh — spin up ummah2.falahos.my on Contabo via Traefik
|
|
set -euo pipefail
|
|
|
|
DEPLOY_DIR="/opt/ummah-wordpress"
|
|
SITE_URL="https://ummah2.falahos.my"
|
|
REPO="https://github.com/maifors/falah-os.git"
|
|
BRANCH="community-edition"
|
|
|
|
echo "▶ Deploying ummah2.falahos.my"
|
|
|
|
# ── Clone / update repo ───────────────────────────────────────────────────────
|
|
if [ -d "$DEPLOY_DIR/.git" ]; then
|
|
git -C "$DEPLOY_DIR" fetch origin
|
|
git -C "$DEPLOY_DIR" reset --hard origin/$BRANCH
|
|
else
|
|
git clone --branch "$BRANCH" --depth 1 "$REPO" "$DEPLOY_DIR"
|
|
fi
|
|
cd "$DEPLOY_DIR/ummah-wordpress"
|
|
|
|
# ── .env setup ────────────────────────────────────────────────────────────────
|
|
if [ ! -f .env ]; then
|
|
cp .env.example .env
|
|
echo ""
|
|
echo "⚠️ Fill .env before continuing:"
|
|
echo " nano $DEPLOY_DIR/ummah-wordpress/.env"
|
|
echo ""
|
|
echo " DB_ROOT_PASSWORD — strong random password"
|
|
echo " DB_PASSWORD — strong random password"
|
|
echo " WP_ADMIN_PASSWORD — strong password for /wp-admin"
|
|
exit 0
|
|
fi
|
|
|
|
source .env
|
|
|
|
# ── Detect Traefik network name ───────────────────────────────────────────────
|
|
TRAEFIK_NETWORK=$(docker network ls --format '{{.Name}}' | grep -iE "traefik|proxy|public" | head -1 || echo "traefik-public")
|
|
export TRAEFIK_NETWORK
|
|
echo " Using Traefik network: $TRAEFIK_NETWORK"
|
|
|
|
# ── Check https-redirect middleware exists ────────────────────────────────────
|
|
# If not, add it (some Traefik setups define it globally, some don't)
|
|
if ! docker inspect traefik 2>/dev/null | grep -q "https-redirect"; then
|
|
echo " Note: https-redirect middleware may need to be pre-defined in Traefik config"
|
|
fi
|
|
|
|
# ── Start stack ───────────────────────────────────────────────────────────────
|
|
echo "── Starting DB ──"
|
|
docker compose up -d db
|
|
echo " Waiting for MariaDB…"
|
|
until docker compose exec -T db mysqladmin ping -u root -p"$DB_ROOT_PASSWORD" --silent 2>/dev/null; do
|
|
sleep 2
|
|
done
|
|
echo " DB ready ✅"
|
|
|
|
echo "── Starting WordPress ──"
|
|
docker compose up -d wordpress
|
|
|
|
echo " Waiting for WordPress files…"
|
|
for i in $(seq 1 40); do
|
|
if docker compose exec -T wordpress test -f /var/www/html/wp-includes/version.php 2>/dev/null; then
|
|
break
|
|
fi
|
|
sleep 3
|
|
done
|
|
|
|
# ── WP-CLI install ────────────────────────────────────────────────────────────
|
|
echo "── Running WP install via WP-CLI ──"
|
|
docker compose run --rm wpcli core install \
|
|
--url="$SITE_URL" \
|
|
--title="${WP_SITE_TITLE:-Ummah FalahOS}" \
|
|
--admin_user="${WP_ADMIN_USER:-admin}" \
|
|
--admin_password="$WP_ADMIN_PASSWORD" \
|
|
--admin_email="${WP_ADMIN_EMAIL:-wanjauhari@gmail.com}" \
|
|
--skip-email 2>/dev/null || echo " Already installed."
|
|
|
|
# ── Set permalink ─────────────────────────────────────────────────────────────
|
|
docker compose run --rm wpcli rewrite structure '/%postname%/' --hard 2>/dev/null
|
|
|
|
# ── Install plugins ───────────────────────────────────────────────────────────
|
|
echo "── Installing Falah plugins ──"
|
|
|
|
GITEA_BASE="https://git.falahos.my/falahos/falah-os-ce/raw/branch/community-edition/wordpress-plugins"
|
|
GITEA_TOKEN="${GITEA_TOKEN:-81dad6b01711baff0f23218dd3fd53d60e97751b}"
|
|
|
|
# Download zips locally (WP-CLI can't auth via header, so pre-download)
|
|
curl -sL -H "Authorization: token $GITEA_TOKEN" \
|
|
"$GITEA_BASE/falah-shortcodes.zip" -o /tmp/falah-shortcodes.zip
|
|
curl -sL -H "Authorization: token $GITEA_TOKEN" \
|
|
"$GITEA_BASE/hermes-ai-bridge.zip" -o /tmp/hermes-ai-bridge.zip
|
|
|
|
# Copy zips into the WP container volume mount
|
|
WP_VOLUME=$(docker volume inspect ummah-wordpress_ummah2-wp-data --format '{{.Mountpoint}}' 2>/dev/null || echo "")
|
|
if [ -n "$WP_VOLUME" ]; then
|
|
cp /tmp/falah-shortcodes.zip "$WP_VOLUME/falah-shortcodes.zip"
|
|
cp /tmp/hermes-ai-bridge.zip "$WP_VOLUME/hermes-ai-bridge.zip"
|
|
docker compose run --rm wpcli plugin install /var/www/html/falah-shortcodes.zip \
|
|
--activate --force 2>/dev/null && echo " falah-shortcodes ✅" || echo " falah-shortcodes: upload manually"
|
|
docker compose run --rm wpcli plugin install /var/www/html/hermes-ai-bridge.zip \
|
|
--activate --force 2>/dev/null && echo " hermes-ai-bridge ✅" || echo " hermes-ai-bridge: upload manually"
|
|
rm -f "$WP_VOLUME/falah-shortcodes.zip" "$WP_VOLUME/hermes-ai-bridge.zip"
|
|
else
|
|
echo " ⚠️ Volume not found — install plugins manually from /tmp/*.zip"
|
|
fi
|
|
|
|
# Essential WP.org plugins
|
|
echo "── Installing WP.org plugins ──"
|
|
for plugin in astra tutor-lms mailpoet woocommerce easy-digital-downloads litespeed-cache; do
|
|
docker compose run --rm wpcli plugin install "$plugin" --activate 2>/dev/null \
|
|
&& echo " $plugin ✅" || echo " $plugin ⚠️"
|
|
done
|
|
|
|
# ── Astra theme ───────────────────────────────────────────────────────────────
|
|
docker compose run --rm wpcli theme install astra --activate 2>/dev/null || true
|
|
|
|
# ── WP performance settings ───────────────────────────────────────────────────
|
|
docker compose run --rm wpcli option update blogdescription "Learn, Discuss, and Grow Together" 2>/dev/null || true
|
|
docker compose run --rm wpcli option update timezone_string "Asia/Kuala_Lumpur" 2>/dev/null || true
|
|
docker compose run --rm wpcli option update date_format "d F Y" 2>/dev/null || true
|
|
|
|
echo ""
|
|
echo "✅ ummah2.falahos.my is live!"
|
|
echo " WP Admin: $SITE_URL/wp-admin"
|
|
echo " User: ${WP_ADMIN_USER:-admin}"
|
|
echo ""
|
|
echo "── DNS (add in Cloudflare) ──"
|
|
echo " ummah2.falahos.my A 13.140.161.244 (proxied)"
|