CI Bot
a3967c6829
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 6s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 10s
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 1m6s
CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped
CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
CI/CD Pipeline / Integration Tests (pull_request) Failing after 28m22s
1. Remove unused aiosmtplib dependency from requirements.txt
2. Remove 5 unused config items (API_PREFIX, REDIS_MAX_CONNECTION,
JWT_SECRET_KEY_OLD, SECRET_ROTATION_DAYS, LOG_LEVEL) from config.py,
.env.production.example, and init_production_env.sh.
Kept ENABLE_REDIS_SESSIONS (actively used in dependencies.py).
3. Fix project permission check TODOs in test_error_scenarios.py —
permissions are implemented, updated assertions to expect 403.
4. Merge two Storage implementations into shared package:
- packages/shared/storage.py: merged API features (HTTPS endpoint
fix, diagnose(), detailed logging) into SharedStorageService
- apps/api/app/core/storage.py: thin re-export wrapper for
backward compatibility
- Updated test mocks to target packages.shared.storage
83 lines
2.4 KiB
Bash
Executable File
83 lines
2.4 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
STAGING_ENV=${STAGING_ENV:-/var/lib/xiaoxia-saas-staging/.env}
|
|
PRODUCTION_DIR=${PRODUCTION_DIR:-/var/lib/xiaoxia-saas-production}
|
|
PRODUCTION_ENV=${PRODUCTION_ENV:-$PRODUCTION_DIR/.env}
|
|
GENERATED_DIR=${GENERATED_DIR:-$PRODUCTION_DIR/generated}
|
|
FORCE=${FORCE:-false}
|
|
|
|
if [ -e "$PRODUCTION_ENV" ] && [ "$FORCE" != "true" ]; then
|
|
echo "ERROR: production env already exists: $PRODUCTION_ENV" >&2
|
|
echo "Set FORCE=true only after manually reviewing the existing file." >&2
|
|
exit 1
|
|
fi
|
|
|
|
mkdir -p "$PRODUCTION_DIR" "$GENERATED_DIR"
|
|
chmod 700 "$PRODUCTION_DIR"
|
|
|
|
get_staging_value() {
|
|
key="$1"
|
|
if [ -f "$STAGING_ENV" ]; then
|
|
grep -E "^${key}=" "$STAGING_ENV" | tail -1 | cut -d= -f2- || true
|
|
fi
|
|
}
|
|
|
|
random_secret() {
|
|
python3 - <<'PY'
|
|
import secrets
|
|
print(secrets.token_urlsafe(48))
|
|
PY
|
|
}
|
|
|
|
OSS_ENDPOINT=${OSS_ENDPOINT:-$(get_staging_value OSS_ENDPOINT)}
|
|
OSS_BUCKET_NAME=${OSS_BUCKET_NAME:-$(get_staging_value OSS_BUCKET_NAME)}
|
|
OSS_ACCESS_KEY_ID=${OSS_ACCESS_KEY_ID:-$(get_staging_value OSS_ACCESS_KEY_ID)}
|
|
OSS_ACCESS_KEY_SECRET=${OSS_ACCESS_KEY_SECRET:-$(get_staging_value OSS_ACCESS_KEY_SECRET)}
|
|
JWT_SECRET_KEY=${JWT_SECRET_KEY:-$(random_secret)}
|
|
|
|
cat > "$PRODUCTION_ENV" <<EOF
|
|
APP_NAME=xiaoxia-saas
|
|
APP_VERSION=0.1.0
|
|
APP_ENV=production
|
|
ENVIRONMENT=production
|
|
DEBUG=false
|
|
AUTO_CREATE_SCHEMA=false
|
|
USE_IN_MEMORY_DB=false
|
|
|
|
ENV=production
|
|
API_PORT=8001
|
|
WEB_PORT=3000
|
|
PUBLIC_API_BASE_URL=https://api.xiaoxiajianji.com
|
|
GENERATED_FILES_HOST_DIR=$GENERATED_DIR
|
|
|
|
DATABASE_URL=postgresql+psycopg://xiaoxia:CHANGE_ME_PRODUCTION_DB_PASSWORD@xiaoxia-postgres-production:5432/xiaoxia_saas
|
|
REDIS_URL=redis://xiaoxia-redis-production:6379/0
|
|
CELERY_BROKER_URL=redis://xiaoxia-redis-production:6379/0
|
|
CELERY_RESULT_BACKEND=redis://xiaoxia-redis-production:6379/1
|
|
ENABLE_REDIS_SESSIONS=true
|
|
|
|
JWT_SECRET_KEY=$JWT_SECRET_KEY
|
|
|
|
ENABLE_EMAIL_DELIVERY=false
|
|
SMTP_HOST=
|
|
SMTP_PORT=587
|
|
SMTP_USER=
|
|
SMTP_PASSWORD=
|
|
SMTP_FROM_EMAIL=
|
|
SMTP_FROM_NAME=小虾 SaaS
|
|
SMTP_USE_TLS=true
|
|
|
|
OSS_ENDPOINT=$OSS_ENDPOINT
|
|
OSS_ACCESS_KEY_ID=$OSS_ACCESS_KEY_ID
|
|
OSS_ACCESS_KEY_SECRET=$OSS_ACCESS_KEY_SECRET
|
|
OSS_BUCKET_NAME=$OSS_BUCKET_NAME
|
|
|
|
CORS_ORIGINS_RAW=https://xiaoxiajianji.com,https://api.xiaoxiajianji.com
|
|
EOF
|
|
|
|
chmod 600 "$PRODUCTION_ENV"
|
|
|
|
echo "OK production env initialized: $PRODUCTION_ENV"
|
|
echo "NEXT: replace CHANGE_ME_PRODUCTION_DB_PASSWORD and provision xiaoxia-postgres-production/xiaoxia-redis-production before deployment."
|