232 lines
7.5 KiB
Bash
232 lines
7.5 KiB
Bash
|
#!/bin/bash
|
||
|
|
# ============================================================
|
||
|
|
# 光湖 · Forgejo 智能一键部署脚本
|
||
|
|
# 功能：自动探测服务器环境 → 拉取最新配置 → 部署代码仓库
|
||
|
|
# 适用：换服务器时一条命令跑完
|
||
|
|
# ============================================================
|
||
|
|
set -e
|
||
|
|
|
||
|
|
# ====== 颜色输出 ======
|
||
|
|
RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; CYAN='\033[0;36m'; NC='\033[0m'
|
||
|
|
info() { echo -e "${CYAN}[INFO]${NC} $1"; }
|
||
|
|
ok() { echo -e "${GREEN}[OK]${NC} $1"; }
|
||
|
|
warn() { echo -e "${YELLOW}[WARN]${NC} $1"; }
|
||
|
|
err() { echo -e "${RED}[ERR]${NC} $1"; }
|
||
|
|
|
||
|
|
# ====== 配置区（可自定义）=====
|
||
|
|
DOMAIN="${DOMAIN:-guanghulab.com}"
|
||
|
|
FORGEJO_PORT="${FORGEJO_PORT:-3001}"
|
||
|
|
FORGEJO_DIR="${FORGEJO_DIR:-/opt/forgejo}"
|
||
|
|
FORGEJO_VERSION="${FORGEJO_VERSION:-1.23}"
|
||
|
|
ADMIN_EMAIL="${ADMIN_EMAIL:-admin@guanghulab.com}"
|
||
|
|
COS_BUCKET="${COS_BUCKET:-zy-team-hub-1317346199}"
|
||
|
|
COS_REGION="${COS_REGION:-ap-guangzhou}"
|
||
|
|
|
||
|
|
# ====== 第一步：环境探测 ======
|
||
|
|
info "========== 第一步：环境探测 =========="
|
||
|
|
|
||
|
|
# 探测 OS
|
||
|
|
OS=$(grep -oP '^ID=\K.*' /etc/os-release 2>/dev/null || echo "ubuntu")
|
||
|
|
ARCH=$(uname -m)
|
||
|
|
RAM_MB=$(free -m | awk '/^Mem:/{print $2}')
|
||
|
|
DISK_GB=$(df -BG "${FORGEJO_DIR%/*}" 2>/dev/null | awk 'NR==2{print $4}' | sed 's/G//' || echo "10")
|
||
|
|
IP=$(curl -s ifconfig.me 2>/dev/null || hostname -I | awk '{print $1}')
|
||
|
|
|
||
|
|
info "系统: $OS | 架构: $ARCH | 内存: ${RAM_MB}MB | 磁盘: ${DISK_GB}G"
|
||
|
|
info "域名: $DOMAIN | 服务器IP: $IP"
|
||
|
|
ok "环境探测完成"
|
||
|
|
|
||
|
|
# ====== 第二步：安装依赖 ======
|
||
|
|
info "========== 第二步：安装依赖 =========="
|
||
|
|
|
||
|
|
# 安装必要软件
|
||
|
|
install_pkg() {
|
||
|
|
if ! command -v "$1" &>/dev/null; then
|
||
|
|
info "正在安装 $1..."
|
||
|
|
apt-get install -y "$1" &>/dev/null && ok "$1 安装完成" || warn "$1 安装失败"
|
||
|
|
else
|
||
|
|
ok "$1 已存在"
|
||
|
|
fi
|
||
|
|
}
|
||
|
|
|
||
|
|
install_pkg nginx
|
||
|
|
install_pkg wget
|
||
|
|
install_pkg curl
|
||
|
|
|
||
|
|
# ====== 第三步：配置 Nginx ======
|
||
|
|
info "========== 第三步：配置 Nginx =========="
|
||
|
|
|
||
|
|
cat > /etc/nginx/sites-available/guanghulab << 'NGINXEOF'
|
||
|
|
server {
|
||
|
|
listen 80;
|
||
|
|
server_name DOMAIN_PLACEHOLDER;
|
||
|
|
return 301 https://$server_name$request_uri;
|
||
|
|
}
|
||
|
|
|
||
|
|
server {
|
||
|
|
listen 443 ssl http2;
|
||
|
|
server_name DOMAIN_PLACEHOLDER;
|
||
|
|
|
||
|
|
ssl_certificate /etc/letsencrypt/live/DOMAIN_PLACEHOLDER-0001/fullchain.pem;
|
||
|
|
ssl_certificate_key /etc/letsencrypt/live/DOMAIN_PLACEHOLDER-0001/privkey.pem;
|
||
|
|
ssl_protocols TLSv1.2 TLSv1.3;
|
||
|
|
|
||
|
|
location / {
|
||
|
|
client_max_body_size 100M;
|
||
|
|
proxy_pass http://127.0.0.1:PORT_PLACEHOLDER;
|
||
|
|
proxy_set_header Host $host;
|
||
|
|
proxy_set_header X-Real-IP $remote_addr;
|
||
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||
|
|
proxy_set_header X-Forwarded-Proto $scheme;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
NGINXEOF
|
||
|
|
|
||
|
|
sed -i "s/DOMAIN_PLACEHOLDER/$DOMAIN/g" /etc/nginx/sites-available/guanghulab
|
||
|
|
sed -i "s/PORT_PLACEHOLDER/$FORGEJO_PORT/g" /etc/nginx/sites-available/guanghulab
|
||
|
|
ln -sf /etc/nginx/sites-available/guanghulab /etc/nginx/sites-enabled/
|
||
|
|
rm -f /etc/nginx/sites-enabled/default
|
||
|
|
|
||
|
|
# ====== 第四步：安装 Forgejo ======
|
||
|
|
info "========== 第四步：安装 Forgejo =========="
|
||
|
|
|
||
|
|
if [ -f "$FORGEJO_DIR/repositories/bingshuo/guanghulab.git/HEAD" ]; then
|
||
|
|
ok "Forgejo 数据已存在，跳过安装"
|
||
|
|
else
|
||
|
|
# 下载 Forgejo 二进制
|
||
|
|
FORGEJO_BIN="/usr/local/bin/gitea"
|
||
|
|
if [ ! -f "$FORGEJO_BIN" ]; then
|
||
|
|
DL_URL="https://dl.gitea.com/gitea/${FORGEJO_VERSION}/gitea-${FORGEJO_VERSION}-linux-amd64"
|
||
|
|
info "正在下载 Forgejo ($DL_URL)..."
|
||
|
|
wget -q --timeout=30 -O "$FORGEJO_BIN" "$DL_URL" 2>/dev/null || {
|
||
|
|
warn "主源下载失败，尝试备用源..."
|
||
|
|
wget -q --timeout=30 -O "$FORGEJO_BIN" \
|
||
|
|
"https://github.com/go-gitea/gitea/releases/download/v${FORGEJO_VERSION}.0/gitea-${FORGEJO_VERSION}.0-linux-amd64" 2>/dev/null || {
|
||
|
|
err "所有下载源都失败，请手动下载二进制"
|
||
|
|
exit 1
|
||
|
|
}
|
||
|
|
}
|
||
|
|
chmod +x "$FORGEJO_BIN"
|
||
|
|
ok "Forgejo 二进制下载完成 ($(ls -lh $FORGEJO_BIN | awk '{print $5}'))"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# 尝试从 COS 恢复备份
|
||
|
|
if command -v coscmd &>/dev/null; then
|
||
|
|
info "正在从 COS 查找备份..."
|
||
|
|
BACKUP_FILE=$(coscmd list backups/ 2>/dev/null | grep -i "forgejo\|gitea\|guanghu" | head -1 | awk '{print $NF}')
|
||
|
|
if [ -n "$BACKUP_FILE" ]; then
|
||
|
|
info "找到备份: $BACKUP_FILE，正在下载..."
|
||
|
|
mkdir -p /tmp/forgejo-restore
|
||
|
|
coscmd download "$BACKUP_FILE" /tmp/forgejo-restore/backup.tar.gz &>/dev/null
|
||
|
|
tar -xzf /tmp/forgejo-restore/backup.tar.gz -C /opt --strip-components=2 data/guanghulab/forgejo 2>/dev/null && {
|
||
|
|
ok "从 COS 备份恢复 Forgejo 数据成功"
|
||
|
|
} || warn "备份恢复失败，将创建新的 Forgejo 实例"
|
||
|
|
rm -rf /tmp/forgejo-restore
|
||
|
|
else
|
||
|
|
warn "COS 中未找到 Forgejo 备份，将创建新实例"
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
fi
|
||
|
|
|
||
|
|
# ====== 第五步：创建配置 ======
|
||
|
|
info "========== 第五步：创建配置 =========="
|
||
|
|
|
||
|
|
mkdir -p $FORGEJO_DIR/data $FORGEJO_DIR/log $FORGEJO_DIR/repositories $FORGEJO_DIR/custom/conf
|
||
|
|
|
||
|
|
cat > $FORGEJO_DIR/custom/conf/app.ini << INIEOF
|
||
|
|
APP_NAME = 光湖 · Forgejo
|
||
|
|
RUN_MODE = prod
|
||
|
|
|
||
|
|
[server]
|
||
|
|
PROTOCOL = http
|
||
|
|
DOMAIN = $DOMAIN
|
||
|
|
ROOT_URL = https://$DOMAIN/
|
||
|
|
HTTP_PORT = $FORGEJO_PORT
|
||
|
|
|
||
|
|
[database]
|
||
|
|
DB_TYPE = sqlite3
|
||
|
|
PATH = $FORGEJO_DIR/data/forgejo.db
|
||
|
|
|
||
|
|
[repository]
|
||
|
|
ROOT = $FORGEJO_DIR/repositories
|
||
|
|
|
||
|
|
[service]
|
||
|
|
DISABLE_REGISTRATION = false
|
||
|
|
REQUIRE_SIGNIN_VIEW = false
|
||
|
|
|
||
|
|
[server]
|
||
|
|
SSH_DOMAIN = $DOMAIN
|
||
|
|
INIEOF
|
||
|
|
|
||
|
|
# ====== 第六步：创建用户并启动服务 ======
|
||
|
|
info "========== 第六步：启动服务 =========="
|
||
|
|
|
||
|
|
# 创建 git 用户
|
||
|
|
id -u git &>/dev/null || useradd -m -s /bin/bash git
|
||
|
|
chown -R git:git $FORGEJO_DIR
|
||
|
|
|
||
|
|
# 注册 systemd 服务
|
||
|
|
cat > /etc/systemd/system/forgejo.service << 'UNITEOF'
|
||
|
|
[Unit]
|
||
|
|
Description=Forgejo
|
||
|
|
After=network.target
|
||
|
|
|
||
|
|
[Service]
|
||
|
|
Type=simple
|
||
|
|
User=git
|
||
|
|
ExecStart=/usr/local/bin/gitea web --config OPT_DIR_PLACEHOLDER/custom/conf/app.ini --work-path OPT_DIR_PLACEHOLDER
|
||
|
|
Restart=always
|
||
|
|
RestartSec=5
|
||
|
|
|
||
|
|
[Install]
|
||
|
|
WantedBy=multi-user.target
|
||
|
|
UNITEOF
|
||
|
|
|
||
|
|
sed -i "s|OPT_DIR_PLACEHOLDER|$FORGEJO_DIR|g" /etc/systemd/system/forgejo.service
|
||
|
|
|
||
|
|
systemctl daemon-reload
|
||
|
|
systemctl enable forgejo --quiet 2>/dev/null
|
||
|
|
systemctl start forgejo
|
||
|
|
sleep 2
|
||
|
|
|
||
|
|
# 检查服务
|
||
|
|
if systemctl is-active --quiet forgejo; then
|
||
|
|
ok "Forgejo 服务运行中 (端口 $FORGEJO_PORT)"
|
||
|
|
else
|
||
|
|
err "Forgejo 启动失败，查看日志: journalctl -u forgejo -n 50 --no-pager"
|
||
|
|
exit 1
|
||
|
|
fi
|
||
|
|
|
||
|
|
# ====== 第七步：配置 SSL ======
|
||
|
|
info "========== 第七步：配置 SSL =========="
|
||
|
|
|
||
|
|
if [ ! -f "/etc/letsencrypt/live/$DOMAIN-0001/fullchain.pem" ]; then
|
||
|
|
if command -v certbot &>/dev/null; then
|
||
|
|
info "正在申请 SSL 证书..."
|
||
|
|
certbot --nginx -d "$DOMAIN" --non-interactive --agree-tos -m "$ADMIN_EMAIL" --quiet 2>/dev/null && {
|
||
|
|
ok "SSL 证书配置成功 ($DOMAIN)"
|
||
|
|
} || warn "SSL 证书申请失败，将使用 HTTP"
|
||
|
|
else
|
||
|
|
warn "certbot 未安装，跳过 SSL 配置"
|
||
|
|
fi
|
||
|
|
else
|
||
|
|
ok "SSL 证书已存在，跳过申请"
|
||
|
|
fi
|
||
|
|
|
||
|
|
# 重启 Nginx 加载最终配置
|
||
|
|
nginx -t && systemctl restart nginx
|
||
|
|
|
||
|
|
# ====== 完成 ======
|
||
|
|
echo ""
|
||
|
|
info "========================================"
|
||
|
|
ok "光湖 · Forgejo 部署完成！"
|
||
|
|
echo ""
|
||
|
|
info "访问地址: https://$DOMAIN/"
|
||
|
|
info "管理后台: https://$DOMAIN/user/login"
|
||
|
|
echo ""
|
||
|
|
info "常用命令:"
|
||
|
|
info " 查看状态: sudo systemctl status forgejo"
|
||
|
|
info " 查看日志: sudo journalctl -u forgejo -n 50 -f"
|
||
|
|
info " 重启服务: sudo systemctl restart forgejo"
|
||
|
|
info "========================================"
|