blob: 9c547cfa75fa4696fabf1abd9e05a60f4f64a308 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
|
#!/usr/bin/env bash
set -euo pipefail
NAS_HOST="karan@100.121.200.111"
NAS_PATH="/volume2/docker/goodall"
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
cd "$REPO_DIR"
echo "==> Checking SSH connectivity to ${NAS_HOST}"
if ! ssh -o ConnectTimeout=5 -o BatchMode=yes "$NAS_HOST" true; then
echo "ERROR: cannot reach ${NAS_HOST} over SSH (tailscale down?)" >&2
exit 1
fi
echo "==> Clearing stale project files on ${NAS_HOST}:${NAS_PATH} (preserving config/ and .env)"
ssh "$NAS_HOST" "mkdir -p ${NAS_PATH} && find ${NAS_PATH} -mindepth 1 -maxdepth 1 ! -name 'config' ! -name '.env' -exec rm -rf {} +"
echo "==> Syncing project files to ${NAS_HOST}:${NAS_PATH}"
COPYFILE_DISABLE=1 tar -cz \
--exclude='.git' \
--exclude='.claude' \
--exclude='config' \
--exclude='.env' \
. | ssh "$NAS_HOST" "tar -xzf - -C ${NAS_PATH}"
echo "==> Decrypting secrets and writing remote .env"
sops --input-type dotenv --output-type dotenv -d .env.enc \
| ssh "$NAS_HOST" "cat > ${NAS_PATH}/.env && chmod 600 ${NAS_PATH}/.env"
echo "==> Pulling latest images and recreating containers"
ssh "$NAS_HOST" "cd ${NAS_PATH} && docker compose pull && docker compose up -d"
echo "==> Deploy complete."
|
