SimoandCursor
c46dadeda4
Align nodemailer with Auth.js peers, bump patch deps, validate env on deploy builds, add admin error boundary, and warn when Redis is missing in production. Co-authored-by: Cursor <[email protected]>
313 lines
15 KiB
YAML
313 lines
15 KiB
YAML
name: Deploy
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
tags:
|
|
- "v*"
|
|
jobs:
|
|
release:
|
|
if: startsWith(gitea.ref_name, 'v')
|
|
runs-on: shell
|
|
steps:
|
|
- name: Create Release
|
|
env:
|
|
VERSION: ${{ gitea.ref_name }}
|
|
GITEA_API: ${{ gitea.api_url }}
|
|
GITEA_REPO: ${{ gitea.repository }}
|
|
run: |
|
|
set -e
|
|
exec 2>&1
|
|
BARE="/docker/gitea/gitea/git/repositories/remco/epicnext-cms.git"
|
|
echo "=== Creating release for ${VERSION} ==="
|
|
|
|
PREV_TAG="$(git -C "$BARE" tag --sort=-creatordate | head -2 | tail -1 || echo '')"
|
|
|
|
if [ -n "$PREV_TAG" ] && [ "$PREV_TAG" != "$VERSION" ]; then
|
|
CHANGELOG="$(git -C "$BARE" log --oneline --no-decorate --max-count=50 "${PREV_TAG}..${VERSION}")"
|
|
[ -z "$CHANGELOG" ] && CHANGELOG="No commit changes since ${PREV_TAG}"
|
|
else
|
|
TOTAL="$(git -C "$BARE" rev-list --count "${VERSION}" 2>/dev/null || echo '?')"
|
|
CHANGELOG="Initial release of EpicNext-CMS (${TOTAL} commits)."
|
|
fi
|
|
[ -z "$CHANGELOG" ] && CHANGELOG="Initial release"
|
|
|
|
# Pin the other components at their current commits so the release is reproducible.
|
|
CAT_REF="$(git ls-remote https://gitlab.epicnabbo.nl/remco/Epicnabbo-Catalogus-Updated-Daily.git Beta-3 2>/dev/null | awk '{print $1}')"
|
|
NITRO_REF="$(git ls-remote https://github.com/duckietm/Nitro-V3.git main 2>/dev/null | awk '{print $1}')"
|
|
RENDER_REF="$(git ls-remote https://github.com/duckietm/Nitro_Render_V3.git main 2>/dev/null | awk '{print $1}')"
|
|
EMU_REF="$(git ls-remote https://github.com/duckietm/Polaris-Emulator.git main 2>/dev/null | awk '{print $1}')"
|
|
|
|
{
|
|
echo "# EpicNext-CMS ${VERSION}"
|
|
echo ""
|
|
echo "> Modern, high-performance CMS for Habbo hotel emulators — built on Next.js 16, React 19 and Prisma 7. Integrates with Polaris / Arcturus Morningstar databases."
|
|
echo ""
|
|
echo "## Menu"
|
|
echo "- [What is EpicNext-CMS?](#what-is-epicnext-cms)"
|
|
echo "- [System Requirements](#system-requirements)"
|
|
echo "- [Installation Wizard](#installation-wizard)"
|
|
echo "- [How it is used](#how-it-is-used)"
|
|
echo "- [Changes](#changes)"
|
|
echo "- [Linked repositories](#linked-repositories)"
|
|
echo ""
|
|
echo '<a id="what-is-epicnext-cms"></a>'
|
|
echo "## What is EpicNext-CMS?"
|
|
echo ""
|
|
echo "EpicNext-CMS is a full public-facing hotel website plus an administrative panel. It features NextAuth authentication (argon2id/bcrypt with MD5 upgrade), real-time RCON communication with the emulator, Server-Sent Events for live radio, smooth page transitions and extensive extensibility. Full documentation: https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/README.md"
|
|
echo ""
|
|
echo '<a id="system-requirements"></a>'
|
|
echo "## System Requirements"
|
|
echo ""
|
|
echo "What you need to install before running the CMS:"
|
|
echo ""
|
|
echo "| Component | Version | Notes |"
|
|
echo "| --------- | ------- | ----- |"
|
|
echo "| Node.js | >= 22 | Required by Next.js 16 |"
|
|
echo "| pnpm | >= 10.33.4 | Package manager (npm/yarn not supported) |"
|
|
echo "| MySQL / MariaDB | 8.0+ / 10.6+ | Shared with the emulator |"
|
|
echo "| Redis | 7.x+ | Optional — caching, rate limiting, SSE |"
|
|
echo "| Java | 17+ | Only if building the emulator |"
|
|
echo "| Maven | 3.9+ | Only if building the emulator |"
|
|
echo ""
|
|
echo "The CMS shares its database with the Polaris / Arcturus emulator. It only reads/writes emulator-owned tables and never alters them."
|
|
echo ""
|
|
echo '<a id="installation-wizard"></a>'
|
|
echo "## Installation Wizard"
|
|
echo ""
|
|
echo "A complete hotel stack = **EpicNext-CMS** (this repo) + **Polaris Emulator** + **Nitro V3 client** + **Catalogus** data. Follow the steps in order."
|
|
echo ""
|
|
echo "**Quick links:** [Full setup guide](https://github.com/duckietm/Complete-Retro-on-Ubuntu) · [EpicNext-CMS repo](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms) · [Reference configs in this repo](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/setup)"
|
|
echo ""
|
|
echo "### 1. Clone & Install the CMS"
|
|
echo '```bash'
|
|
echo "git clone https://gitlab.epicnabbo.nl/remco/EpicNext-Cms.git"
|
|
echo "cd EpicNext-Cms"
|
|
echo "pnpm install"
|
|
echo '```'
|
|
echo ""
|
|
echo "### 2. Database Setup"
|
|
echo ""
|
|
echo "The CMS shares the emulator database. Import the Polaris/Arcturus database first, then create the CMS schema:"
|
|
echo '```sql'
|
|
echo "CREATE DATABASE IF NOT EXISTS epicnext_cms CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;"
|
|
echo '```'
|
|
echo ""
|
|
echo "### 3. Configure Environment"
|
|
echo '```bash'
|
|
echo "cp .env.example .env"
|
|
echo '```'
|
|
echo ""
|
|
echo "Edit .env with at minimum: DATABASE_URL, AUTH_SECRET, HOTEL_NAME and APP_URL. See .env.example for RCON, email, Redis, OAuth and PayPal options."
|
|
echo ""
|
|
echo "### 4. Generate Prisma Client"
|
|
echo '```bash'
|
|
echo "pnpm prisma:generate"
|
|
echo '```'
|
|
echo ""
|
|
echo "### 5. Run CMS Migrations"
|
|
echo '```bash'
|
|
echo "pnpm db:migrate"
|
|
echo '```'
|
|
echo ""
|
|
echo "Creates all CMS-owned tables (website_*, radio_*, acl_*, admin_audit_log). Emulator tables are never touched. Check status with pnpm db:migrate:status."
|
|
echo ""
|
|
echo "### 6. Polaris Emulator"
|
|
echo ""
|
|
echo "Clone and build the emulator (requires Java 17+ and Maven 3.9+):"
|
|
echo '```bash'
|
|
echo "git clone https://github.com/duckietm/Polaris-Emulator.git /var/www/emulator"
|
|
echo "cd /var/www/emulator/Emulator"
|
|
echo "mvn clean package"
|
|
echo '```'
|
|
echo ""
|
|
echo "Place the built Habbo-*-jar-with-dependencies.jar next to **config.ini** (see [setup/emulator/config.ini](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/setup/emulator/config.ini)), then create a systemd unit from [setup/emulator/emulator.service](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/setup/emulator/emulator.service) with the [emulator](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/setup/emulator/emulator) launcher so it starts on boot. The bundled update-Nitrov3.sh in this repo automates cloning, building and updating the emulator and Nitro — run it any time to pull the latest commits and rebuild:"
|
|
echo '```bash'
|
|
echo "./update-Nitrov3.sh"
|
|
echo '```'
|
|
echo ""
|
|
echo "### 7. Nitro V3 & Renderer"
|
|
echo ""
|
|
echo "Clone both Nitro repos and build the client:"
|
|
echo '```bash'
|
|
echo "git clone https://github.com/duckietm/Nitro_Render_V3.git /var/www/Nitro_Render_V3"
|
|
echo "git clone https://github.com/duckietm/Nitro-V3.git /var/www/Nitro-V3"
|
|
echo "cd /var/www/Nitro_Render_V3 && yarn install && yarn link"
|
|
echo "cd /var/www/Nitro-V3 && yarn install && yarn link \"@nitrots/nitro-renderer\" && yarn build"
|
|
echo '```'
|
|
echo ""
|
|
echo "Copy the reference configs from [setup/nitro/](https://gitlab.epicnabbo.nl/remco/EpicNext-Cms/src/branch/main/setup/nitro) into /var/www/Nitro-V3/public/configuration, keep them as *.json, and replace **MY_DOMAIN** with your domain, API URL and gamedata paths (see the Full setup guide, NitroV3_And_Emulator.md)."
|
|
echo ""
|
|
echo "### 8. Catalogus (catalog & gamedata)"
|
|
echo ""
|
|
echo "Catalogus holds the daily-updated catalog/gamedata. Clone the Beta-3 branch alongside the other components:"
|
|
echo '```bash'
|
|
echo "git clone -b Beta-3 https://gitlab.epicnabbo.nl/remco/Epicnabbo-Catalogus-Updated-Daily.git /var/www/catalogus"
|
|
echo '```'
|
|
echo ""
|
|
echo "### 9. Build & Start the CMS"
|
|
echo '```bash'
|
|
echo "# Development (hot reload)"
|
|
echo "pnpm dev"
|
|
echo ""
|
|
echo "# Production"
|
|
echo "pnpm build && pnpm start"
|
|
echo '```'
|
|
echo ""
|
|
echo "Open http://localhost:3000 in your browser."
|
|
echo ""
|
|
echo "### 10. First Login"
|
|
echo ""
|
|
echo "1. Register at /register, or log in with an existing emulator account."
|
|
echo "2. Grant admin access: UPDATE users SET rank = 7 WHERE username = 'yourname';"
|
|
echo "3. Visit /admin and configure your hotel via Admin -> CMS Settings."
|
|
echo ""
|
|
echo '<a id="how-it-is-used"></a>'
|
|
echo "## How it is used"
|
|
echo ""
|
|
echo "- Public site: browse the hotel, news, radio and the Nitro client at /client."
|
|
echo "- Admin panel: /admin for CMS settings, theming (12 presets), users, radio and more."
|
|
echo "- Background jobs: run pnpm jobs:worker for daily backups and cleanup."
|
|
echo "- Optional: Cloudflare Turnstile / reCAPTCHA, OpenAI moderation and email/PayPal via .env."
|
|
echo ""
|
|
echo '<a id="changes"></a>'
|
|
echo "## Changes"
|
|
echo '```'
|
|
echo "${CHANGELOG}"
|
|
echo '```'
|
|
echo ""
|
|
echo '<a id="linked-repositories"></a>'
|
|
echo "## Linked repositories (exact commits)"
|
|
echo ""
|
|
echo "The game components below are pinned to the exact commits used by this release and are deployed alongside the CMS:"
|
|
echo ""
|
|
echo "| Component | Repository | Commit |"
|
|
echo "|-----------|------------|--------|"
|
|
echo "| Catalogus | https://gitlab.epicnabbo.nl/remco/Epicnabbo-Catalogus-Updated-Daily | ${CAT_REF:-?} |"
|
|
echo "| Nitro-V3 | https://github.com/duckietm/Nitro-V3 | ${NITRO_REF:-?} |"
|
|
echo "| Nitro-Render-V3 | https://github.com/duckietm/Nitro_Render_V3 | ${RENDER_REF:-?} |"
|
|
echo "| Polaris Emulator | https://github.com/duckietm/Polaris-Emulator | ${EMU_REF:-?} |"
|
|
echo ""
|
|
echo "**[Nitro-V3](https://github.com/duckietm/Nitro-V3)** · **[Nitro Renderer](https://github.com/duckietm/Nitro_Render_V3)** · **[Polaris Emulator](https://github.com/duckietm/Polaris-Emulator)** · **[Catalogus](https://gitlab.epicnabbo.nl/remco/Epicnabbo-Catalogus-Updated-Daily)**"
|
|
echo ""
|
|
echo "---"
|
|
echo "*Automated release from Gitea Actions*"
|
|
} > /tmp/release-body.md
|
|
|
|
PAYLOAD="$(jq -Rs --arg v "${VERSION}" '{tag_name: $v, name: $v, body: ., draft: false, prerelease: false}' < /tmp/release-body.md)"
|
|
|
|
TOKEN="${GITEA_TOKEN:-${{ secrets.GITEA_TOKEN }}}"
|
|
|
|
HTTP_CODE="$(curl -s -w '%{http_code}' -o /tmp/release-resp.json \
|
|
-X POST "${GITEA_API}/repos/${GITEA_REPO}/releases" \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$PAYLOAD")"
|
|
|
|
if [ "${HTTP_CODE}" = "409" ]; then
|
|
RELEASES="$(curl -sf "${GITEA_API}/repos/${GITEA_REPO}/releases" \
|
|
-H "Authorization: token ${TOKEN}")"
|
|
REL_ID="$(echo "$RELEASES" | jq -r ".[] | select(.tag_name==\"${VERSION}\") | .id")"
|
|
HTTP_CODE="$(curl -s -w '%{http_code}' -o /tmp/release-resp.json \
|
|
-X PATCH "${GITEA_API}/repos/${GITEA_REPO}/releases/${REL_ID}" \
|
|
-H "Authorization: token ${TOKEN}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$PAYLOAD")"
|
|
fi
|
|
|
|
if [ "${HTTP_CODE:-0}" -ge 200 ] && [ "${HTTP_CODE:-0}" -lt 300 ]; then
|
|
echo "SUCCESS: Release ${VERSION} created/updated"
|
|
cat /tmp/release-resp.json | jq -r '.html_url // .id'
|
|
else
|
|
echo "FAILED HTTP ${HTTP_CODE}"
|
|
cat /tmp/release-resp.json
|
|
exit 1
|
|
fi
|
|
deploy:
|
|
if: startsWith(gitea.ref_name, 'v') == false
|
|
runs-on: shell
|
|
steps:
|
|
- name: Deploy
|
|
run: |
|
|
set -e
|
|
|
|
exec 9>/var/tmp/epic_web_control_deploy.lock
|
|
flock -n 9 || { echo "ERROR: Another deployment is already running! Cancelling."; exit 1; }
|
|
|
|
echo "--- Deploying ---"
|
|
|
|
error_handler() {
|
|
echo "!!! DEPLOYMENT FAILED on line $1 !!!" >&2
|
|
sudo systemctl start atom-nexst.service || true
|
|
exit 1
|
|
}
|
|
trap 'error_handler $LINENO' ERR
|
|
|
|
docker image prune -f
|
|
cd /var/www/atom-nexst/
|
|
|
|
DEPLOY_USER="$(id -un)"
|
|
DEPLOY_GROUP="$(id -gn)"
|
|
sudo chown -R "${DEPLOY_USER}:${DEPLOY_GROUP}" /var/www/atom-nexst/
|
|
git config --global --add safe.directory /var/www/atom-nexst
|
|
git remote set-url origin /docker/gitea/gitea/git/repositories/remco/epicnext-cms.git/
|
|
|
|
echo "Fetching origin/main..."
|
|
git fetch origin --prune
|
|
|
|
echo "Clearing sticky git index bits (if any)..."
|
|
STICKY_LIST="$(git ls-files -v | awk '/^[a-zS]/ {print substr($0,3)}' || true)"
|
|
if [ -n "${STICKY_LIST}" ]; then
|
|
echo "${STICKY_LIST}" | while IFS= read -r f; do
|
|
[ -n "$f" ] || continue
|
|
git update-index --no-skip-worktree --no-assume-unchanged -- "$f" 2>/dev/null || true
|
|
done
|
|
fi
|
|
|
|
echo "Hard reset to origin/main..."
|
|
git reset --hard origin/main
|
|
|
|
echo "Nuclear-replacing src/ from HEAD..."
|
|
rm -rf src
|
|
git checkout -f HEAD -- src
|
|
git clean -fd -e .env -e .env.local -e .env.production -e .env*.local
|
|
|
|
if ! git diff --exit-code HEAD -- src >/dev/null; then
|
|
echo "ERROR: src/ still differs from HEAD after nuclear checkout:" >&2
|
|
git diff --stat HEAD -- src >&2 || true
|
|
exit 1
|
|
fi
|
|
echo "Verified src/ matches HEAD"
|
|
|
|
rm -f tsconfig.tsbuildinfo .tsbuildinfo
|
|
find . -maxdepth 3 -name '*.tsbuildinfo' -delete 2>/dev/null || true
|
|
rm -rf .output dist .next/types .next/dev
|
|
|
|
export APP_VERSION="$(git rev-parse --short HEAD)"
|
|
export NEXT_PUBLIC_APP_VERSION="${APP_VERSION}"
|
|
echo "APP_VERSION=${APP_VERSION}"
|
|
|
|
pnpm install --frozen-lockfile
|
|
pnpm db:migrate
|
|
pnpm prisma:generate
|
|
pnpm typecheck
|
|
pnpm test
|
|
# Validate production env (AUTH_SECRET, DATABASE_URL, …) during build.
|
|
# Do not set SKIP_ENV_VALIDATION here — that flag is for tests/tooling only.
|
|
pnpm build
|
|
|
|
sudo chown -R www-data:www-data /var/www/atom-nexst/
|
|
|
|
echo "Hard resetting systemd service..."
|
|
sudo systemctl stop atom-nexst.service || true
|
|
pkill -f 'next-server' || true
|
|
sudo systemctl start atom-nexst.service
|
|
|
|
sleep 2
|
|
if ! systemctl is-active --quiet atom-nexst.service; then
|
|
echo "ERROR: atom-nexst.service failed to start!" >&2
|
|
exit 1
|
|
fi
|
|
|
|
echo "--- Deployed successfully ---"
|