113 lines
2.8 KiB
Bash
113 lines
2.8 KiB
Bash
#!/bin/bash
|
|
set -euo pipefail
|
|
|
|
# SafeLine WAF 部署脚本
|
|
# 用法: bash deploy.sh [安装目录] [管理端口]
|
|
|
|
INSTALL_DIR="${1:-/data/safeline}"
|
|
MGT_PORT="${2:-9443}"
|
|
IMAGE_TAG="9.3.9"
|
|
SUBNET_PREFIX="192.168.90"
|
|
|
|
# 颜色输出
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
NC='\033[0m'
|
|
|
|
info() { echo -e "${GREEN}[INFO]${NC} $*"; }
|
|
warn() { echo -e "${YELLOW}[WARN]${NC} $*"; }
|
|
error() { echo -e "${RED}[ERROR]${NC} $*"; exit 1; }
|
|
|
|
# 检查 root
|
|
if [ "$(id -u)" -ne 0 ]; then
|
|
error "需要 root 权限运行"
|
|
fi
|
|
|
|
# 检查 Docker
|
|
if ! command -v docker &>/dev/null; then
|
|
error "Docker 未安装"
|
|
fi
|
|
|
|
if ! docker compose version &>/dev/null && ! docker-compose version &>/dev/null; then
|
|
error "Docker Compose 未安装"
|
|
fi
|
|
|
|
# 检测 docker compose 命令
|
|
if docker compose version &>/dev/null; then
|
|
COMPOSE="docker compose"
|
|
else
|
|
COMPOSE="docker-compose"
|
|
fi
|
|
|
|
info "安装目录: $INSTALL_DIR"
|
|
info "管理端口: $MGT_PORT"
|
|
|
|
# 创建目录
|
|
mkdir -p "$INSTALL_DIR"/{resources/{mgt,postgres/data,nginx,detector,chaos,cache,sock,luigi},logs/{nginx,detector}}
|
|
|
|
# 生成随机密码
|
|
POSTGRES_PASSWORD=$(tr -dc 'a-zA-Z0-9' < /dev/urandom | head -c 20)
|
|
|
|
# 如果已有 .env 则保留
|
|
ENV_FILE="$INSTALL_DIR/.env"
|
|
if [ -f "$ENV_FILE" ]; then
|
|
info "检测到已有 .env 配置，保留原配置"
|
|
source "$ENV_FILE"
|
|
else
|
|
cat > "$ENV_FILE" << EOF
|
|
SAFELINE_DIR=$INSTALL_DIR
|
|
POSTGRES_PASSWORD=$POSTGRES_PASSWORD
|
|
MGT_PORT=$MGT_PORT
|
|
RELEASE=
|
|
CHANNEL=
|
|
REGION=
|
|
IMAGE_PREFIX=chaitin
|
|
IMAGE_TAG=$IMAGE_TAG
|
|
SUBNET_PREFIX=$SUBNET_PREFIX
|
|
ARCH_SUFFIX=
|
|
EOF
|
|
info ".env 配置已生成"
|
|
fi
|
|
|
|
# 复制 compose.yaml
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
if [ -f "$SCRIPT_DIR/compose.yaml" ]; then
|
|
cp "$SCRIPT_DIR/compose.yaml" "$INSTALL_DIR/docker-compose.yaml"
|
|
elif [ -f "$SCRIPT_DIR/../compose.yaml" ]; then
|
|
cp "$SCRIPT_DIR/../compose.yaml" "$INSTALL_DIR/docker-compose.yaml"
|
|
else
|
|
warn "未找到 compose.yaml，请手动复制到 $INSTALL_DIR/"
|
|
fi
|
|
|
|
# 拉取镜像
|
|
info "拉取 Docker 镜像..."
|
|
cd "$INSTALL_DIR"
|
|
$COMPOSE pull 2>&1 || warn "部分镜像拉取失败，继续尝试启动..."
|
|
|
|
# 启动容器
|
|
info "启动容器..."
|
|
$COMPOSE up -d --remove-orphans
|
|
|
|
# 等待健康检查
|
|
info "等待服务启动..."
|
|
for i in $(seq 1 60); do
|
|
if docker inspect --format='{{.State.Health.Status}}' safeline-mgt 2>/dev/null | grep -q healthy; then
|
|
info "管理服务已启动"
|
|
break
|
|
fi
|
|
sleep 5
|
|
done
|
|
|
|
# 获取本机 IP
|
|
LOCAL_IP=$(hostname -I 2>/dev/null | awk '{print $1}' || echo "本机IP")
|
|
|
|
echo ""
|
|
echo "========================================="
|
|
info "部署完成!"
|
|
info "管理面板: https://$LOCAL_IP:$MGT_PORT/"
|
|
info "默认用户名: admin"
|
|
info "首次登录需要通过 mgt-cli 获取密码:"
|
|
info " docker exec safeline-mgt /app/mgt-cli reset-admin --once"
|
|
echo "========================================="
|