mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-11-05 12:48:14 +00:00
Kevin Veen-Birkenbach
0bf286f62a
- Added 'font-src data:' to CSP whitelist to allow inline fonts in Admin UI - Refactored init.sh to run as root only for volume permission setup, then drop privileges to www-data - Unified all bash invocations to sh for POSIX compliance - Added missing 'bundles' named volume and mount to Docker Compose - Set init container to run as root (0:0) for permission setup - Added admin user rename step via Ansible task See discussion: https://chatgpt.com/share/69087361-859c-800f-862c-7413350cca3e
141 lines
4.8 KiB
Bash
141 lines
4.8 KiB
Bash
#!/bin/sh
|
|
# Shopware initialization script (POSIX sh)
|
|
# - Root phase: fix volumes & permissions, then switch to www-data
|
|
# - First run: perform system:install
|
|
# - Every run: run DB migrations + rebuild cache + compile assets & themes
|
|
# - Verifies admin bundles exist, otherwise exits with error
|
|
|
|
set -eu
|
|
|
|
APP_ROOT="/var/www/html"
|
|
MARKER="$APP_ROOT/.infinito/installed"
|
|
LOG_PREFIX="[INIT]"
|
|
PHP_BIN="php"
|
|
|
|
log() { printf "%s %s\n" "$LOG_PREFIX" "$1"; }
|
|
fail() { printf "%s [ERROR] %s\n" "$LOG_PREFIX" "$1" >&2; exit 1; }
|
|
|
|
# ---------------------------
|
|
# 0) Root phase (if running as root)
|
|
# ---------------------------
|
|
if [ "$(id -u)" -eq 0 ]; then
|
|
# Prepare required folders and shared volumes
|
|
mkdir -p "$APP_ROOT/.infinito" \
|
|
"$APP_ROOT/public/bundles" \
|
|
"$APP_ROOT/public/media" \
|
|
"$APP_ROOT/public/theme" \
|
|
"$APP_ROOT/public/thumbnail" \
|
|
"$APP_ROOT/public/sitemap" \
|
|
"$APP_ROOT/var"
|
|
|
|
log "Fixing permissions on shared volumes..."
|
|
chown -R www-data:www-data "$APP_ROOT/public" "$APP_ROOT/var" || true
|
|
chmod -R 775 "$APP_ROOT/public" "$APP_ROOT/var" || true
|
|
|
|
# Switch to www-data for all subsequent operations
|
|
exec su -s /bin/sh www-data "$0" "$@"
|
|
fi
|
|
|
|
# From here on: running as www-data
|
|
cd "$APP_ROOT" || fail "Cannot cd to $APP_ROOT"
|
|
|
|
# Optional environment hints
|
|
APP_ENV_STR=$($PHP_BIN -r 'echo getenv("APP_ENV") ?: "";' 2>/dev/null || true)
|
|
APP_URL_STR=$($PHP_BIN -r 'echo getenv("APP_URL") ?: "";' 2>/dev/null || true)
|
|
[ -n "$APP_ENV_STR" ] || log "APP_ENV not set (using defaults)"
|
|
[ -n "$APP_URL_STR" ] || log "APP_URL not set (reverse proxy must set headers)"
|
|
|
|
# ---------------------------
|
|
# 1) Database reachability check (PDO)
|
|
# ---------------------------
|
|
log "Checking database via PDO..."
|
|
$PHP_BIN -r '
|
|
$url = getenv("DATABASE_URL");
|
|
if (!$url) { fwrite(STDERR, "DATABASE_URL not set\n"); exit(1); }
|
|
$p = parse_url($url);
|
|
if (!$p || !isset($p["scheme"])) { fwrite(STDERR, "Invalid DATABASE_URL\n"); exit(1); }
|
|
$host = $p["host"] ?? "localhost";
|
|
$port = $p["port"] ?? 3306;
|
|
$db = ltrim($p["path"] ?? "", "/");
|
|
$user = $p["user"] ?? "";
|
|
$pass = $p["pass"] ?? "";
|
|
$dsn = "mysql:host=".$host.";port=".$port.";dbname=".$db.";charset=utf8mb4";
|
|
$retries = 60;
|
|
while ($retries-- > 0) {
|
|
try { new PDO($dsn, $user, $pass, [PDO::ATTR_TIMEOUT => 3]); exit(0); }
|
|
catch (Exception $e) { sleep(2); }
|
|
}
|
|
fwrite(STDERR, "DB not reachable\n"); exit(1);
|
|
' || fail "Database not reachable"
|
|
|
|
# ---------------------------
|
|
# 2) First-time install detection
|
|
# ---------------------------
|
|
FIRST_INSTALL=0
|
|
if [ ! -f "$MARKER" ]; then
|
|
log "Checking if database is empty..."
|
|
if $PHP_BIN -r '
|
|
$url = getenv("DATABASE_URL");
|
|
$p = parse_url($url);
|
|
$db = ltrim($p["path"] ?? "", "/");
|
|
$dsn = "mysql:host=".($p["host"]??"localhost").";port=".($p["port"]??3306).";dbname=".$db.";charset=utf8mb4";
|
|
$pdo = new PDO($dsn, $p["user"] ?? "", $p["pass"] ?? "");
|
|
$q = $pdo->query("SELECT COUNT(*) FROM information_schema.tables WHERE table_schema=".$pdo->quote($db));
|
|
$cnt = (int)$q->fetchColumn();
|
|
exit($cnt === 0 ? 0 : 100);
|
|
'; then
|
|
FIRST_INSTALL=1
|
|
else
|
|
ST=$?
|
|
if [ "$ST" -eq 100 ]; then
|
|
log "Database not empty → skipping install"
|
|
else
|
|
fail "Database check failed (exit code $ST)"
|
|
fi
|
|
fi
|
|
fi
|
|
|
|
if [ "$FIRST_INSTALL" -eq 1 ]; then
|
|
log "Performing first-time Shopware installation..."
|
|
$PHP_BIN -d memory_limit=1024M bin/console system:install --basic-setup --create-database
|
|
mkdir -p "$(dirname "$MARKER")"
|
|
: > "$MARKER"
|
|
fi
|
|
|
|
# ---------------------------
|
|
# 3) Always run migrations
|
|
# ---------------------------
|
|
log "Running database migrations..."
|
|
$PHP_BIN -d memory_limit=1024M bin/console database:migrate --all
|
|
$PHP_BIN -d memory_limit=1024M bin/console database:migrate-destructive --all
|
|
|
|
# ---------------------------
|
|
# 4) Always rebuild caches, bundles, and themes
|
|
# ---------------------------
|
|
log "Rebuilding caches and assets..."
|
|
$PHP_BIN bin/console cache:clear
|
|
$PHP_BIN bin/console bundle:dump
|
|
# Use --copy if symlinks cause issues
|
|
$PHP_BIN bin/console assets:install --no-interaction --force
|
|
$PHP_BIN bin/console theme:refresh
|
|
$PHP_BIN bin/console theme:compile
|
|
# Best-effort: not critical if it fails
|
|
$PHP_BIN bin/console dal:refresh:index || log "dal:refresh:index failed (non-critical)"
|
|
|
|
# ---------------------------
|
|
# 5) Verify admin bundles
|
|
# ---------------------------
|
|
if [ ! -d "public/bundles/administration" ]; then
|
|
fail "Missing directory public/bundles/administration (asset build failed)"
|
|
fi
|
|
if ! ls public/bundles/administration/* >/dev/null 2>&1; then
|
|
fail "No files found in public/bundles/administration (asset build failed)"
|
|
fi
|
|
|
|
# ---------------------------
|
|
# 6) Show version info
|
|
# ---------------------------
|
|
$PHP_BIN bin/console system:version 2>/dev/null || log "system:version not available"
|
|
|
|
log "Initialization complete."
|