216 lines
11 KiB
Bash
Executable File
216 lines
11 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Builds and brings up an environment, then makes sure WordPress/WooCommerce
|
|
# are installed and configured to match design doc §01/§03/§07. Safe to run
|
|
# repeatedly — every step is idempotent.
|
|
set -euo pipefail
|
|
|
|
ENVIRONMENT="${1:?Usage: deploy.sh <dev|staging|production>}"
|
|
export ENVIRONMENT
|
|
REPO_ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
|
cd "$REPO_ROOT"
|
|
|
|
case "$ENVIRONMENT" in
|
|
dev|staging|production) ;;
|
|
*) echo "environment must be 'dev', 'staging', or 'production'" >&2; exit 1 ;;
|
|
esac
|
|
|
|
ENV_FILE=".env.${ENVIRONMENT}"
|
|
if [[ ! -f "$ENV_FILE" ]]; then
|
|
echo "missing $ENV_FILE — copy .env.example to $ENV_FILE and fill it in" >&2
|
|
exit 1
|
|
fi
|
|
# shellcheck source=lib/env.sh
|
|
source "$REPO_ROOT/deploy/lib/env.sh"
|
|
|
|
SITE_URL="$(env_get "$ENV_FILE" SITE_URL)"
|
|
SITE_TITLE="$(env_get "$ENV_FILE" SITE_TITLE)"
|
|
WP_ADMIN_USER="$(env_get "$ENV_FILE" WP_ADMIN_USER)"
|
|
WP_ADMIN_PASSWORD="$(env_get "$ENV_FILE" WP_ADMIN_PASSWORD)"
|
|
WP_ADMIN_EMAIL="$(env_get "$ENV_FILE" WP_ADMIN_EMAIL)"
|
|
|
|
# DB_PASSWORD/DB_ROOT_PASSWORD are stripped from what Compose itself loads:
|
|
# Compose scans every value in --env-file for $identifier-looking patterns
|
|
# as part of building its own interpolation table, and warns "variable not
|
|
# set" for any it finds — even though nothing consumes these two via ${VAR}
|
|
# anymore (they only flow through secrets/, via env_get below, which reads
|
|
# the real, unfiltered $ENV_FILE directly). Filtering them out of Compose's
|
|
# copy is what makes that warning actually go away, permanently, regardless
|
|
# of what characters end up in either password.
|
|
COMPOSE_ENV_FILE="$(mktemp)"
|
|
trap 'rm -f "$COMPOSE_ENV_FILE"' EXIT
|
|
grep -Ev '^(DB_PASSWORD|DB_ROOT_PASSWORD)=' "$ENV_FILE" > "$COMPOSE_ENV_FILE"
|
|
|
|
# -p pins the Compose project name to the environment (default is the
|
|
# directory name, which every environment shares — that made staging quietly
|
|
# reuse dev's db_data volume/credentials the first time this ran).
|
|
COMPOSE="docker compose -p bookstore-${ENVIRONMENT} -f docker-compose.yml -f docker-compose.${ENVIRONMENT}.yml --env-file ${COMPOSE_ENV_FILE}"
|
|
# wp-cli runs as www-data (who already owns wp-config.php etc.), not root —
|
|
# `docker exec` defaults to root only because the image never sets a
|
|
# non-root default user for exec sessions; the actual web-facing php-fpm
|
|
# workers already run as www-data regardless.
|
|
WP="$COMPOSE exec -T -u www-data wordpress wp"
|
|
|
|
echo "==> writing DB secret files (bypasses compose's \${VAR} interpolation entirely)"
|
|
SECRETS_DIR="secrets/${ENVIRONMENT}"
|
|
mkdir -p "$SECRETS_DIR"
|
|
chmod 700 "secrets" "$SECRETS_DIR" 2>/dev/null || true
|
|
DB_PASSWORD_VALUE="$(env_get "$ENV_FILE" DB_PASSWORD)"
|
|
DB_ROOT_PASSWORD_VALUE="$(env_get "$ENV_FILE" DB_ROOT_PASSWORD)"
|
|
: "${DB_PASSWORD_VALUE:?set DB_PASSWORD in ${ENV_FILE}}"
|
|
: "${DB_ROOT_PASSWORD_VALUE:?set DB_ROOT_PASSWORD in ${ENV_FILE}}"
|
|
printf '%s' "$DB_PASSWORD_VALUE" > "$SECRETS_DIR/db_password"
|
|
printf '%s' "$DB_ROOT_PASSWORD_VALUE" > "$SECRETS_DIR/db_root_password"
|
|
# Optional, unlike the two above — an environment without a Hardcover token
|
|
# just leaves HardcoverAdapter::is_configured() false. Written unconditionally
|
|
# (even empty) so the bind mount in docker-compose.yml always has a real file
|
|
# to point at, never a directory Docker auto-creates for a missing path (the
|
|
# exact bug ENVIRONMENT-unset guards elsewhere in this file exist to prevent).
|
|
HARDCOVER_API_TOKEN_VALUE="$(env_get "$ENV_FILE" HARDCOVER_API_TOKEN)"
|
|
printf '%s' "$HARDCOVER_API_TOKEN_VALUE" > "$SECRETS_DIR/hardcover_api_token"
|
|
# Stripe credentials are supplied through .env but mounted into the
|
|
# containers as files so secret values never become container environment
|
|
# variables. The official gateway copies them into its WordPress settings.
|
|
STRIPE_MODE_VALUE="$(env_get "$ENV_FILE" STRIPE_MODE)"
|
|
STRIPE_MODE_VALUE="${STRIPE_MODE_VALUE:-test}"
|
|
case "$STRIPE_MODE_VALUE" in
|
|
test|live) ;;
|
|
*) echo "STRIPE_MODE must be 'test' or 'live'" >&2; exit 1 ;;
|
|
esac
|
|
STRIPE_PUBLISHABLE_KEY_VALUE="$(env_get "$ENV_FILE" STRIPE_PUBLISHABLE_KEY)"
|
|
STRIPE_SECRET_KEY_VALUE="$(env_get "$ENV_FILE" STRIPE_SECRET_KEY)"
|
|
STRIPE_WEBHOOK_SECRET_VALUE="$(env_get "$ENV_FILE" STRIPE_WEBHOOK_SECRET)"
|
|
printf '%s' "$STRIPE_PUBLISHABLE_KEY_VALUE" > "$SECRETS_DIR/stripe_publishable_key"
|
|
printf '%s' "$STRIPE_SECRET_KEY_VALUE" > "$SECRETS_DIR/stripe_secret_key"
|
|
printf '%s' "$STRIPE_WEBHOOK_SECRET_VALUE" > "$SECRETS_DIR/stripe_webhook_secret"
|
|
if [[ -z "$STRIPE_PUBLISHABLE_KEY_VALUE" || -z "$STRIPE_SECRET_KEY_VALUE" ]]; then
|
|
echo " (Stripe keys not set in ${ENV_FILE} — Stripe will remain disabled)"
|
|
else
|
|
if [[ "$STRIPE_PUBLISHABLE_KEY_VALUE" != pk_${STRIPE_MODE_VALUE}_* ]]; then
|
|
echo "STRIPE_PUBLISHABLE_KEY does not match STRIPE_MODE=${STRIPE_MODE_VALUE}" >&2
|
|
exit 1
|
|
fi
|
|
if [[ "$STRIPE_SECRET_KEY_VALUE" != sk_${STRIPE_MODE_VALUE}_* && "$STRIPE_SECRET_KEY_VALUE" != rk_${STRIPE_MODE_VALUE}_* ]]; then
|
|
echo "STRIPE_SECRET_KEY does not match STRIPE_MODE=${STRIPE_MODE_VALUE}" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
if [[ -n "$STRIPE_WEBHOOK_SECRET_VALUE" && "$STRIPE_WEBHOOK_SECRET_VALUE" != whsec_* ]]; then
|
|
echo "STRIPE_WEBHOOK_SECRET must start with whsec_" >&2
|
|
exit 1
|
|
fi
|
|
# Same pattern again — optional, written unconditionally.
|
|
# Integration\BooksRunAdapter::is_configured() is false until a real key
|
|
# lands in BOOKSRUN_API_KEY. BOOKSRUN_FTP_PASSWORD is a placeholder: no
|
|
# FTP access exists yet either (Import\BooksRunOfferSync is a stub), but
|
|
# the secret-file path is wired up now so nothing changes here once it does.
|
|
BOOKSRUN_API_KEY_VALUE="$(env_get "$ENV_FILE" BOOKSRUN_API_KEY)"
|
|
printf '%s' "$BOOKSRUN_API_KEY_VALUE" > "$SECRETS_DIR/booksrun_api_key"
|
|
BOOKSRUN_FTP_PASSWORD_VALUE="$(env_get "$ENV_FILE" BOOKSRUN_FTP_PASSWORD)"
|
|
printf '%s' "$BOOKSRUN_FTP_PASSWORD_VALUE" > "$SECRETS_DIR/booksrun_ftp_password"
|
|
# 644, not 600: the db/wordpress/cron containers read this as their own
|
|
# (non-host-matching) container UID, e.g. www-data — chmod 600 made it
|
|
# unreadable to them. The containing directory (700, above) is what
|
|
# actually keeps other host users out; these just need to be world-readable
|
|
# within that already-restricted directory.
|
|
chmod 644 "$SECRETS_DIR/db_password" "$SECRETS_DIR/db_root_password" "$SECRETS_DIR/hardcover_api_token" "$SECRETS_DIR/stripe_publishable_key" "$SECRETS_DIR/stripe_secret_key" "$SECRETS_DIR/stripe_webhook_secret" "$SECRETS_DIR/booksrun_api_key" "$SECRETS_DIR/booksrun_ftp_password"
|
|
|
|
echo "==> building and starting ${ENVIRONMENT}"
|
|
$COMPOSE up -d --build
|
|
|
|
echo "==> waiting for WordPress core files (the official image copies them in on first boot of an empty volume, which takes a few seconds)"
|
|
for i in $(seq 1 60); do
|
|
if $COMPOSE exec -T wordpress test -f /var/www/html/wp-settings.php >/dev/null 2>&1; then
|
|
break
|
|
fi
|
|
if [[ "$i" -eq 60 ]]; then
|
|
echo "wordpress core files did not appear in time" >&2
|
|
exit 1
|
|
fi
|
|
sleep 2
|
|
done
|
|
|
|
echo "==> ensuring WordPress is installed"
|
|
if ! $WP core is-installed; then
|
|
$WP core install \
|
|
--url="${SITE_URL:?set SITE_URL in ${ENV_FILE}}" \
|
|
--title="${SITE_TITLE:-Bookstore}" \
|
|
--admin_user="${WP_ADMIN_USER:?set WP_ADMIN_USER in ${ENV_FILE}}" \
|
|
--admin_password="${WP_ADMIN_PASSWORD:?set WP_ADMIN_PASSWORD in ${ENV_FILE}}" \
|
|
--admin_email="${WP_ADMIN_EMAIL:?set WP_ADMIN_EMAIL in ${ENV_FILE}}" \
|
|
--skip-email
|
|
fi
|
|
|
|
# WordPress defaults to plain "?p=123" permalinks on a fresh install,
|
|
# which silently breaks routing for /my-account/, the Store API
|
|
# (/wp-json/wc/store/v1/...), and any other pretty-URL path — confirmed
|
|
# directly (my-account fell through to the homepage instead of 404ing,
|
|
# which made the problem non-obvious). "Rewrite rules are empty" further
|
|
# down in this script was this same root cause going unfixed on every
|
|
# deploy until now.
|
|
echo "==> setting pretty permalinks (required for Store API / my-account routing)"
|
|
$WP rewrite structure '/%postname%/'
|
|
$WP rewrite flush --hard
|
|
|
|
echo "==> installing/activating theme (Blocksy — free; Book Store starter site needs a manual license + import, see README)"
|
|
$WP theme install blocksy --activate
|
|
|
|
echo "==> installing/activating required plugins"
|
|
$WP plugin install woocommerce woocommerce-gateway-stripe redis-cache blocksy-companion --activate
|
|
$WP plugin activate bookstore-core
|
|
$WP redis enable || true
|
|
|
|
# The distributor workflow depends on Stripe authorizing at checkout and
|
|
# capturing later when SupplierOrderJob moves the order to Processing.
|
|
# Read the mounted files inside the container so credentials never appear in
|
|
# this command line or deployment logs.
|
|
echo "==> configuring Stripe from ${ENV_FILE} (authorize and capture later)"
|
|
$WP eval '
|
|
$read_secret = static function (string $env): string {
|
|
$path = getenv($env);
|
|
return $path && is_readable($path) ? trim((string) file_get_contents($path)) : "";
|
|
};
|
|
$mode = getenv("STRIPE_MODE") === "live" ? "live" : "test";
|
|
$publishable = $read_secret("STRIPE_PUBLISHABLE_KEY_FILE");
|
|
$secret = $read_secret("STRIPE_SECRET_KEY_FILE");
|
|
$webhook = $read_secret("STRIPE_WEBHOOK_SECRET_FILE");
|
|
$settings = get_option("woocommerce_stripe_settings", []);
|
|
$settings["enabled"] = $publishable !== "" && $secret !== "" ? "yes" : "no";
|
|
$settings["capture"] = "no";
|
|
$settings["testmode"] = $mode === "test" ? "yes" : "no";
|
|
$settings[$mode === "test" ? "test_publishable_key" : "publishable_key"] = $publishable;
|
|
$settings[$mode === "test" ? "test_secret_key" : "secret_key"] = $secret;
|
|
$settings[$mode === "test" ? "test_webhook_secret" : "webhook_secret"] = $webhook;
|
|
update_option("woocommerce_stripe_settings", $settings);
|
|
'
|
|
|
|
echo "==> enabling WooCommerce HPOS (custom order tables)"
|
|
$WP option update woocommerce_custom_orders_table_enabled yes
|
|
$WP option update woocommerce_custom_orders_table_data_sync_enabled yes
|
|
|
|
# Membership\Registration hooks onto WooCommerce's own My Account
|
|
# registration form (design doc §07) rather than a bespoke signup form —
|
|
# it's disabled by default, so nothing shows up without this.
|
|
echo "==> enabling WooCommerce account registration (member signup)"
|
|
$WP option update woocommerce_enable_myaccount_registration yes
|
|
|
|
# WooCommerce's default (unset -> '1:1') force-crops every product
|
|
# thumbnail to a square — confirmed directly: a 335x500 portrait book cover
|
|
# was landing at a hard-cropped 300x300 shop-grid thumbnail, cutting off
|
|
# the top and bottom of the cover. 'uncropped' makes it a proportional
|
|
# 300x448 instead. wc_get_image_size() caches the computed size in the
|
|
# object cache, so the option change alone doesn't take effect until flushed.
|
|
echo "==> uncropped product thumbnails (book covers are portrait, not square)"
|
|
$WP option update woocommerce_thumbnail_cropping uncropped
|
|
$WP cache flush
|
|
|
|
if [[ "$ENVIRONMENT" != "production" ]]; then
|
|
echo "==> discouraging search engines (non-production)"
|
|
$WP option update blog_public 0
|
|
fi
|
|
|
|
echo "==> flushing caches and rewrite rules"
|
|
$WP cache flush
|
|
$WP rewrite flush
|
|
|
|
echo "==> deploy complete: ${ENVIRONMENT}"
|