Publish deployment and backup scripts

2026-04-11 00:21:08 +02:00
parent 86204e0836
commit 9de9acec48
27 changed files with 3709 additions and 206 deletions
--- a/deploy-docker-traefik.sh
+++ b/deploy-docker-traefik.sh
@@ -0,0 +1,140 @@
+#!/usr/bin/env bash
+# ==============================================================================
+# Standalone Traefik Deployment
+# ==============================================================================
+# Deploys the shared Traefik reverse proxy at /opt/traefik/.
+# Usually auto-bootstrapped by the first service deploy script — this script
+# is only needed if you want to set up infrastructure ahead of time.
+#
+# Usage:  deploy-docker-traefik.sh
+#         deploy-docker-traefik.sh --remove          # Stop, keep certs + configs
+#         deploy-docker-traefik.sh --remove --purge   # Delete everything
+# ==============================================================================
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/common.sh"
+
+# --- Parse arguments ---
+parse_args "$@"
+
+SERVICE_NAME="traefik"
+BASE_DIR="$TRAEFIK_DIR"
+UNIT_NAME="traefik-docker"
+
+# --- Handle --remove ---
+if [[ "$ARG_REMOVE" == "1" ]]; then
+    require_root
+
+    echo ""
+    echo -e "${YELLOW}══════════════════════════════════════════════${NC}"
+    echo -e "${YELLOW}  Removing Traefik${NC}"
+    echo -e "${YELLOW}══════════════════════════════════════════════${NC}"
+    if [[ "$ARG_PURGE" == "1" ]]; then
+        echo -e "  Mode:        ${RED}Purge (delete certs + configs)${NC}"
+    else
+        echo -e "  Mode:        Safe (keep acme.json + dynamic/)"
+    fi
+    echo -e "  Data:        ${BASE_DIR}"
+    echo -e "  Systemd:     ${UNIT_NAME}.service"
+    echo -e "${YELLOW}══════════════════════════════════════════════${NC}"
+    echo ""
+
+    warn "Removing Traefik will break ALL services that depend on it."
+    if [[ "$ARG_YES" != "1" ]]; then
+        read -rp "Continue? [y/N] " confirm
+        if [[ "${confirm,,}" != "y" ]]; then
+            info "Cancelled."
+            exit 0
+        fi
+    fi
+
+    # Stop traefik
+    if [[ -d "$BASE_DIR" ]] && [[ -f "${BASE_DIR}/docker-compose.yml" ]]; then
+        (cd "$BASE_DIR" && docker compose down) || true
+        ok "Traefik stopped."
+    fi
+
+    remove_systemd_unit "$UNIT_NAME"
+
+    if [[ "$ARG_PURGE" == "1" ]]; then
+        warn "This will delete ALL Traefik data including certificates and dynamic configs."
+        if [[ "$ARG_YES" != "1" ]]; then
+            read -rp "Permanently delete ${BASE_DIR}? [y/N] " confirm
+            if [[ "${confirm,,}" != "y" ]]; then
+                info "Purge cancelled."
+                exit 0
+            fi
+        fi
+        rm -rf "$BASE_DIR"
+        ok "Purged: $BASE_DIR"
+    else
+        rm -f "${BASE_DIR}/docker-compose.yml"
+        ok "Removed compose file. Preserved acme.json and dynamic/ configs."
+    fi
+
+    echo ""
+    echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+    echo -e "${GREEN}  Traefik removed${NC}"
+    echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+    if [[ "$ARG_PURGE" != "1" ]]; then
+        echo -e "  Certs kept:  ${BASE_DIR}/acme.json"
+        echo -e "  Configs:     ${TRAEFIK_DYNAMIC_DIR}/"
+    fi
+    echo -e "  To redeploy: $0"
+    echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+    echo ""
+    exit 0
+fi
+
+# --- Detect current state for banner ---
+traefik_status="Not deployed"
+if docker ps --format '{{.Names}}' 2>/dev/null | grep -q '^traefik$'; then
+    traefik_status="Running"
+elif [[ -f "${TRAEFIK_DIR}/docker-compose.yml" ]]; then
+    traefik_status="Stopped"
+fi
+
+# --- Print deployment plan ---
+echo ""
+echo -e "${CYAN}══════════════════════════════════════════════${NC}"
+echo -e "${CYAN}  Deploying Traefik${NC}"
+echo -e "${CYAN}══════════════════════════════════════════════${NC}"
+echo -e "  Data:        ${TRAEFIK_DIR}"
+echo -e "  Dynamic:     ${TRAEFIK_DYNAMIC_DIR}/"
+echo -e "  ACME Email:  ${ACME_EMAIL}"
+echo -e "  Status:      ${traefik_status}"
+echo -e "${CYAN}══════════════════════════════════════════════${NC}"
+echo ""
+
+# --- Check if already deployed and running ---
+if docker ps --format '{{.Names}}' 2>/dev/null | grep -q '^traefik$'; then
+    echo -e "${GREEN}  Traefik is already running — nothing to do.${NC}"
+    echo ""
+    echo -e "  Logs:      docker logs -f traefik"
+    echo -e "  Backup:    ${SCRIPT_DIR}/backup-traefik.sh"
+    echo -e "  Remove:    $0 --remove [--purge]"
+    echo ""
+    exit 0
+fi
+
+# --- Deploy ---
+require_root
+detect_os
+install_prerequisites
+ensure_docker_network
+ensure_traefik
+configure_firewall
+
+# --- Summary ---
+echo ""
+echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+echo -e "${GREEN}  Traefik deployed successfully${NC}"
+echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+echo -e "  Dynamic:     ${TRAEFIK_DYNAMIC_DIR}/"
+echo -e "  Certs:       ${TRAEFIK_DIR}/acme.json"
+echo -e "  Systemd:     systemctl status ${UNIT_NAME}"
+echo -e "  Logs:        docker logs -f traefik"
+echo -e "${GREEN}══════════════════════════════════════════════${NC}"
+echo ""