87 lines
3.3 KiB
Bash
Executable File
87 lines
3.3 KiB
Bash
Executable File
#!/bin/bash
|
|
set -e
|
|
|
|
echo "========================================="
|
|
echo " NexusGuard SD-WAN: SYSTEM UPDATE "
|
|
echo "========================================="
|
|
|
|
STATE_FILE=".update-state"
|
|
FORCE_REBUILD=false
|
|
[ "$1" = "--force" ] && FORCE_REBUILD=true
|
|
|
|
# 1. Pastikan file env ada
|
|
if [ ! -f .env ]; then
|
|
echo "[-] ERROR: .env file not found. Please run ./setup.sh first to initialize configuration."
|
|
exit 1
|
|
fi
|
|
|
|
# 2. Update Code dari Git (Main & Submodules)
|
|
echo "[+] Pulling latest source code from repository..."
|
|
GIT_PULL_FAILED=false
|
|
git pull origin main || { GIT_PULL_FAILED=true; echo "[!] Git pull for main repo skipped or failed, continuing..."; }
|
|
|
|
echo "[+] Syncing and updating submodules..."
|
|
SUBMODULE_FAILED=false
|
|
git submodule update --init --recursive --remote || { SUBMODULE_FAILED=true; echo "[!] Git submodule update skipped or failed."; }
|
|
|
|
# 3. Hitung state hash (git + .env) untuk deteksi perubahan
|
|
CURRENT_HASH=$(echo "$(git rev-parse HEAD 2>/dev/null)$(git submodule status 2>/dev/null)$(sha256sum .env 2>/dev/null)" | sha256sum | cut -d" " -f1)
|
|
|
|
# 4. Tentukan apakah perlu rebuild
|
|
NEEDS_REBUILD=false
|
|
if [ "$FORCE_REBUILD" = true ]; then
|
|
echo "[+] --force flag detected. Will rebuild."
|
|
NEEDS_REBUILD=true
|
|
elif [ "$GIT_PULL_FAILED" = true ] || [ "$SUBMODULE_FAILED" = true ]; then
|
|
echo "[!] Git operation failed. Rebuilding as safe fallback."
|
|
NEEDS_REBUILD=true
|
|
elif [ ! -f "$STATE_FILE" ]; then
|
|
echo "[+] First run (no state file found). Full cycle required."
|
|
NEEDS_REBUILD=true
|
|
else
|
|
PREVIOUS_HASH=$(cat "$STATE_FILE" 2>/dev/null || echo "")
|
|
if [ "$CURRENT_HASH" != "$PREVIOUS_HASH" ]; then
|
|
echo "[+] State hash changed. Rebuilding."
|
|
NEEDS_REBUILD=true
|
|
else
|
|
echo "[-] No changes detected. Skipping build and restart."
|
|
fi
|
|
fi
|
|
|
|
# 5. Rebuild cycle — hanya jika ada perubahan
|
|
if [ "$NEEDS_REBUILD" = true ]; then
|
|
# Source .env untuk build process
|
|
echo "[+] Sourcing environment variables from root .env..."
|
|
set -a && . .env && set +a
|
|
|
|
echo "[+] Stopping existing containers..."
|
|
docker compose down
|
|
|
|
echo "[+] Rebuilding Docker images..."
|
|
docker compose build --build-arg VITE_API_BASE_URL=$VITE_API_BASE_URL
|
|
|
|
echo "[+] Restarting containers..."
|
|
docker compose up -d
|
|
|
|
echo "[+] Running automated database migrations..."
|
|
docker exec nexus-guard-suite-server-core-1 ./server-core -migrate-prod || echo "[!] Migration skipped or failed. It might not be needed."
|
|
|
|
echo "[+] Backfilling interface addresses..."
|
|
docker exec nexus-guard-suite-server-core-1 ./server-core -backfill-interface 2>/dev/null || echo "[!] Backfill skipped or not needed."
|
|
|
|
echo "[+] Cleaning up unused dangling images..."
|
|
docker image prune -f
|
|
|
|
# Simpan state secara atomik (tmp + mv untuk cegah korupsi file)
|
|
echo "$CURRENT_HASH" > "$STATE_FILE.tmp" && mv "$STATE_FILE.tmp" "$STATE_FILE"
|
|
|
|
echo "========================================="
|
|
echo " Update & Deployment complete! "
|
|
echo " Dashboard : http://localhost:${WEB_PORT:-80}"
|
|
echo " API Port : ${API_PORT:-8080}"
|
|
echo "========================================="
|
|
else
|
|
echo "========================================="
|
|
echo " No update needed — system is current. "
|
|
echo "========================================="
|
|
fi |