Blame · Line-by-line history

`standalone-deploy.sh`

Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.

standalone-deploy.shBlame85 lines · 1 contributor

Normal view Raw

95e33b0Claude	1	#!/usr/bin/env bash
	2	#
	3	# Standalone single-box deploy for Gluecron on a DEDICATED VPS.
	4	# Brings up Gluecron + Postgres(pgvector) + Caddy(auto-HTTPS) with one command.
	5	#
	6	# Usage (as root on a fresh Ubuntu box):
	7	# curl -fsSL https://raw.githubusercontent.com/ccantynz-alt/Gluecron.com/claude/site-migration-vercel-XstpK/scripts/standalone-deploy.sh \| bash
	8	# or, after cloning:
	9	# bash scripts/standalone-deploy.sh
	10	#
	11	# To migrate existing data: copy a dump to /root/gluecron.sql.gz BEFORE running
	12	# (e.g. `scp` it from the old box). The script restores it automatically.
	13	set -euo pipefail
	14
	15	REPO_URL="https://github.com/ccantynz-alt/Gluecron.com.git"
6b603a3Claude	16	REPO_BRANCH="claude/site-migration-vercel-XstpK"
95e33b0Claude	17	REPO_DIR="/opt/gluecron"
	18	COMPOSE="docker compose -f docker-compose.standalone.yml"
	19
	20	echo "== Gluecron standalone deploy =="
	21
	22	# 1. Docker
	23	if ! command -v docker >/dev/null 2>&1; then
	24	echo "-- installing Docker"
	25	curl -fsSL https://get.docker.com \| sh
	26	fi
	27
6b603a3Claude	28	# 2. Code (the standalone compose file lives on $REPO_BRANCH)
95e33b0Claude	29	if [ ! -d "$REPO_DIR/.git" ]; then
6b603a3Claude	30	echo "-- cloning $REPO_URL ($REPO_BRANCH)"
	31	git clone -b "$REPO_BRANCH" "$REPO_URL" "$REPO_DIR"
95e33b0Claude	32	fi
	33	cd "$REPO_DIR"
6b603a3Claude	34	git fetch origin "$REPO_BRANCH" 2>/dev/null \|\| true
	35	git checkout "$REPO_BRANCH" 2>/dev/null \|\| true
	36	git pull --ff-only origin "$REPO_BRANCH" 2>/dev/null \|\| true
95e33b0Claude	37
	38	# 3. Env (random Postgres password on first run)
	39	if [ ! -f .env ]; then
	40	echo "POSTGRES_PASSWORD=$(openssl rand -hex 24)" > .env
	41	echo "ANTHROPIC_API_KEY=" >> .env
	42	echo "-- generated .env (random Postgres password; add ANTHROPIC_API_KEY later if you want AI features)"
	43	fi
	44
	45	# 4. Firewall (best-effort; only ports we need)
	46	if command -v ufw >/dev/null 2>&1; then
	47	ufw allow 22/tcp >/dev/null 2>&1 \|\| true
	48	ufw allow 80/tcp >/dev/null 2>&1 \|\| true
	49	ufw allow 443/tcp >/dev/null 2>&1 \|\| true
	50	fi
	51
	52	# 5. Database first
	53	echo "-- starting Postgres"
	54	$COMPOSE up -d postgres
	55	echo "-- waiting for Postgres to accept connections"
	56	until $COMPOSE exec -T postgres pg_isready -U gluecron -d gluecron >/dev/null 2>&1; do sleep 2; done
	57
	58	# 6. Restore prior data if a dump is present
	59	if [ -f /root/gluecron.sql.gz ]; then
	60	echo "-- restoring data from /root/gluecron.sql.gz"
	61	gunzip -c /root/gluecron.sql.gz \| $COMPOSE exec -T postgres psql -U gluecron -d gluecron >/dev/null
	62	elif [ -f /root/gluecron.sql ]; then
	63	echo "-- restoring data from /root/gluecron.sql"
	64	$COMPOSE exec -T postgres psql -U gluecron -d gluecron < /root/gluecron.sql >/dev/null
	65	else
	66	echo "-- no dump found at /root/gluecron.sql(.gz); starting with a fresh database"
	67	fi
	68
	69	# 7. App + Caddy
	70	echo "-- building and starting Gluecron + Caddy"
	71	$COMPOSE up -d --build
	72
	73	# 8. Migrations (idempotent — safe whether restored or fresh)
	74	echo "-- applying migrations"
	75	sleep 5
	76	$COMPOSE exec -T gluecron bun run db:migrate \|\| true
	77
	78	echo
	79	echo "== status =="
	80	$COMPOSE ps
	81	echo
	82	echo "Done. Now point gluecron.com + www.gluecron.com DNS at THIS box's IP"
	83	echo "(Cloudflare, DNS-only / grey cloud). Caddy issues the cert automatically"
	84	echo "within ~1 minute of DNS resolving here. Verify with:"
	85	echo " curl -sI https://gluecron.com/healthz"