ops: use host-managed local service list

This commit is contained in:
2026-08-12 11:20:48 +08:00
parent 176119ca29
commit 50371cfb0c
5 changed files with 19 additions and 238 deletions

View File

@@ -8,18 +8,20 @@ ENABLE_HTTP_REDIRECT="${KANBAN_ENABLE_HTTP_REDIRECT:-0}"
GITEA_PORT="${KANBAN_GITEA_PORT:-3443}"
STOCK_FRONTEND_PORT="${KANBAN_STOCK_FRONTEND_PORT:-5443}"
STOCK_API_PORT="${KANBAN_STOCK_API_PORT:-8788}"
SERVICE_LIST_ROOT="/var/www/local-service-list"
if [[ "${EUID}" -ne 0 ]]; then
exec sudo -E bash "$0" "$@"
fi
if [[ ! -f "${SERVICE_LIST_ROOT}/index.html" || ! -f "${SERVICE_LIST_ROOT}/portal.css" ]]; then
echo "Missing local service list assets under ${SERVICE_LIST_ROOT}" >&2
exit 1
fi
mkdir -p /etc/nginx/certs
mkdir -p /var/www/local-kanban-portal
cp "${ROOT_DIR}/deploy/certs/local-kanban.crt" /etc/nginx/certs/gahow-pc.fullchain.pem
cp "${ROOT_DIR}/deploy/certs/local-kanban.key" /etc/nginx/certs/gahow-pc.key
cp "${ROOT_DIR}/portal/index.html" /var/www/local-kanban-portal/index.html
cp "${ROOT_DIR}/portal/portal.css" /var/www/local-kanban-portal/portal.css
rm -f /var/www/local-kanban-portal/portal.js
chmod 600 /etc/nginx/certs/gahow-pc.key
{
@@ -43,7 +45,7 @@ cat <<EOF
server {
listen 443 ssl http2;
server_name ${DOMAIN};
root /var/www/local-kanban-portal;
root ${SERVICE_LIST_ROOT};
index index.html;
ssl_certificate /etc/nginx/certs/gahow-pc.fullchain.pem;
@@ -135,7 +137,7 @@ rm -f /etc/nginx/sites-enabled/default
nginx -t
systemctl reload nginx || systemctl restart nginx
echo "Nginx portal is configured for https://${DOMAIN}/"
echo "Nginx local service list is configured for https://${DOMAIN}/"
echo "Kanban remains available on its own port, for example https://${DOMAIN}:8443/"
echo "Gitea HTTPS is configured for https://${DOMAIN}:${GITEA_PORT}/"
echo "Stock Agent HTTPS is configured for https://${DOMAIN}:${STOCK_FRONTEND_PORT}/"