46f57ae5fe
- Retrait blur Voronoi (.voronoi-bg filter:blur 10px supprime) : retour aux cellules colorees non-blurrees, plus lisible visuellement - Onglet "MEDIA" renomme "recherche-média" (app.vue desktop nav + sheet mobile) - deploy.sh sed redact etendu : couvre desormais TOKEN, API_KEY, PASSWORD, SECRET (avant : TOKEN uniquement). Fix incident leak MISTRAL_API_KEY + RESEND_API_KEY dans transcript Phase 8 deploy. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
63 lines
2.2 KiB
Bash
63 lines
2.2 KiB
Bash
#!/bin/bash
|
|
# deploy.sh — Deploiement AEP vers VPS Hetzner
|
|
# Usage : ./deploy.sh [--check-only]
|
|
# Pre-requis : build Nuxt termine (.output/ present), SSH alias vps-hetzner configure
|
|
|
|
set -e
|
|
|
|
TIMESTAMP=$(date '+%Y-%m-%d %H:%M:%S')
|
|
VPS="vps-hetzner"
|
|
REMOTE_DIR="/opt/aep"
|
|
SERVICE="aep"
|
|
LOCAL_ENV=".env.production"
|
|
REMOTE_ENV="$REMOTE_DIR/.env"
|
|
|
|
log() { echo "[$TIMESTAMP] $1"; }
|
|
|
|
log "=== Deploiement AEP ==="
|
|
|
|
# Garde-fou 1 : .output/ doit exister
|
|
if [ ! -d ".output" ]; then
|
|
log "ERREUR : dossier .output/ introuvable. Lancer 'npm run build' d'abord."
|
|
exit 1
|
|
fi
|
|
|
|
# Garde-fou 2 : diff .env.production vs .env VPS
|
|
log "Verification des variables d'environnement..."
|
|
REMOTE_ENV_CONTENT=$(ssh -o ConnectTimeout=10 -o BatchMode=yes "$VPS" "cat $REMOTE_ENV 2>/dev/null || echo ''")
|
|
LOCAL_ENV_CONTENT=$(cat "$LOCAL_ENV" 2>/dev/null || echo "")
|
|
|
|
if [ "$LOCAL_ENV_CONTENT" != "$REMOTE_ENV_CONTENT" ]; then
|
|
log "AVERTISSEMENT : .env.production local != .env VPS"
|
|
log " --- Local ---"
|
|
echo "$LOCAL_ENV_CONTENT" | sed -E 's/(TOKEN|API_KEY|PASSWORD|SECRET)=.*$/\1=***/' | sed 's/^/ /'
|
|
log " --- VPS ---"
|
|
echo "$REMOTE_ENV_CONTENT" | sed -E 's/(TOKEN|API_KEY|PASSWORD|SECRET)=.*$/\1=***/' | sed 's/^/ /'
|
|
read -p "Continuer malgre la difference ? [y/N] " CONFIRM
|
|
[ "$CONFIRM" = "y" ] || { log "Deploiement annule."; exit 1; }
|
|
fi
|
|
|
|
if [ "$1" = "--check-only" ]; then
|
|
log "Mode check-only - aucun deploiement effectue."
|
|
exit 0
|
|
fi
|
|
|
|
# Upload .output/ vers VPS via tar (rsync indisponible sous Windows)
|
|
log "Upload .output/ vers $VPS:$REMOTE_DIR..."
|
|
tar -czf - .output | ssh -o ConnectTimeout=60 -o BatchMode=yes "$VPS" \
|
|
"mkdir -p $REMOTE_DIR && cd $REMOTE_DIR && tar -xzf -"
|
|
log "Upload termine."
|
|
|
|
# Redemarrage du service
|
|
log "Redemarrage du service $SERVICE..."
|
|
ssh -o ConnectTimeout=10 -o BatchMode=yes "$VPS" \
|
|
"systemctl restart $SERVICE && sleep 2 && systemctl is-active $SERVICE"
|
|
log "Service $SERVICE actif."
|
|
|
|
# Verification sante
|
|
log "Verification sante (port 3333)..."
|
|
ssh -o ConnectTimeout=10 -o BatchMode=yes "$VPS" \
|
|
"curl -s -o /dev/null -w 'HTTP %{http_code}' http://localhost:3333/ || echo 'ERREUR acces port 3333'"
|
|
|
|
log "=== Deploiement termine : $TIMESTAMP ==="
|