lexton-it/NextWks
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: unlock immutable files before destroy, timeout LE cert request

Browse source
This commit is contained in:
Claus Lohmar 2026-07-07 10:34:36 +01:00
parent 8ee09fb229
commit 22471e479b
1 changed files with 7 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
deploy.sh
View file

@ -44,6 +44,11 @@ go build -o "$BINARY_NAME" .
if [ "$GREENFIELD" = true ]; then if [ "$GREENFIELD" = true ]; then
echo "[3/6] Removing old deployment..." echo "[3/6] Removing old deployment..."
# Unlock immutable files (chattr +i from previous deploy) before removing
if [ -d "$TARGET_DIR" ]; then
chattr -R -i "$TARGET_DIR" 2>/dev/null || true
fi
# Preserve .env across greenfield destroy # Preserve .env across greenfield destroy
if [ -f "$TARGET_DIR/.env" ]; then if [ -f "$TARGET_DIR/.env" ]; then
cp "$TARGET_DIR/.env" /tmp/nextworkspace.env.bak cp "$TARGET_DIR/.env" /tmp/nextworkspace.env.bak
@ -303,9 +308,9 @@ EOF
curl -s -b "$COOKIE_JAR" -X POST "http://127.0.0.1:8000/api/acme/autoRenew/email" \ curl -s -b "$COOKIE_JAR" -X POST "http://127.0.0.1:8000/api/acme/autoRenew/email" \
-d "set=${TLS_EMAIL}" > /dev/null -d "set=${TLS_EMAIL}" > /dev/null
# Obtain certificate # Obtain certificate (30s timeout — can hang if DNS doesn't resolve)
echo " Requesting LE certificate for app.${DOMAIN}..." echo " Requesting LE certificate for app.${DOMAIN}..."
CERT_RESULT=$(curl -s -b "$COOKIE_JAR" -X GET "http://127.0.0.1:8000/api/acme/obtainCert" \ CERT_RESULT=$(curl -s --max-time 30 -b "$COOKIE_JAR" -X GET "http://127.0.0.1:8000/api/acme/obtainCert" \
-G -d "domains=app.${DOMAIN}" -d "filename=app.${DOMAIN}" \ -G -d "domains=app.${DOMAIN}" -d "filename=app.${DOMAIN}" \
-d "email=${TLS_EMAIL}" -d "ca=Let's Encrypt" -d "dns=false" 2>&1) -d "email=${TLS_EMAIL}" -d "ca=Let's Encrypt" -d "dns=false" 2>&1)
if echo "$CERT_RESULT" | grep -qi '"success"\|"ok"\|"installed'; then if echo "$CERT_RESULT" | grep -qi '"success"\|"ok"\|"installed'; then