third commit

2026-06-10 17:01:10 +03:00
parent d393cbe1db
commit 00919968f2
21 changed files with 721 additions and 274 deletions
--- a/install.sh
+++ b/install.sh
@@ -1,9 +1,10 @@
 #!/usr/bin/env bash
 set -euo pipefail

-REPO="lendry/sso-mvk"
+REPO="ssomvk/sso-service"
 BRANCH="main"
 INSTALL_DIR="${INSTALL_DIR:-$HOME/sso-service}"
+SKIP_PREREQS="${SKIP_PREREQS:-false}"

 RED='\033[0;31m'; GREEN='\033[0;32m'; YELLOW='\033[1;33m'; CYAN='\033[0;36m'; NC='\033[0m'
 info()  { echo -e "${GREEN}✔${NC} $1"; }
@@ -12,107 +13,232 @@ error() { echo -e "${RED}✘${NC} $1"; exit 1; }
 step()  { echo -e "\n${CYAN}━━━ $1 ━━━${NC}"; }

 echo -e "${CYAN}"
-echo "  ╔═══════════════════════════════════════╗"
-echo "  ║        SSO Service Installer          ║"
-echo "  ╚═══════════════════════════════════════╝"
+echo "  ╔══════════════════════════════════════════════╗"
+echo "  ║           SSO Service — Auto Installer       ║"
+echo "  ║  https://github.com/${REPO}                  ║"
+echo "  ╚══════════════════════════════════════════════╝"
 echo -e "${NC}"

-# ─── Prerequisites ──────────────────────────────────────────────
-step "1/7  Checking prerequisites"
-command -v node  >/dev/null 2>&1 || error "Node.js required → https://nodejs.org"
-command -v npm   >/dev/null 2>&1 || error "npm required"
-command -v docker compose >/dev/null 2>&1 || error "Docker Compose required"
-info "node $(node -v), npm $(npm -v), docker compose found"
+# ─── Проверка root ──────────────────────────────────────────────
+if [ "$(id -u)" -eq 0 ]; then
+  SUDO=""
+else
+  SUDO="sudo"
+fi

-# ─── Clone / Pull ───────────────────────────────────────────────
-step "2/7  Downloading SSO Service"
+# ─── Detecting OS ────────────────────────────────────────────────
+step "Detecting operating system"
+OS=""
+if [ -f /etc/os-release ]; then
+  . /etc/os-release
+  OS="$ID"
+elif command -v lsb_release &>/dev/null; then
+  OS="$(lsb_release -si | tr '[:upper:]' '[:lower:]')"
+else
+  OS="$(uname -s)"
+fi
+info "Detected: ${OS} ($(uname -m))"
+
+# ─── 1. Docker ──────────────────────────────────────────────────
+install_docker() {
+  step "1/8  Installing Docker"
+  if command -v docker &>/dev/null; then
+    info "Docker already installed ($(docker --version))"
+  else
+    warn "Docker not found — installing..."
+    if command -v apt-get &>/dev/null; then
+      curl -fsSL https://get.docker.com | $SUDO sh
+    elif command -v yum &>/dev/null; then
+      curl -fsSL https://get.docker.com | $SUDO sh
+    elif command -v dnf &>/dev/null; then
+      curl -fsSL https://get.docker.com | $SUDO sh
+    else
+      error "Unsupported package manager. Install Docker manually: https://docs.docker.com/engine/install/"
+    fi
+    $SUDO usermod -aG docker "$USER" 2>/dev/null || true
+    info "Docker installed."
+  fi
+
+  # Ensure Docker daemon is running
+  if ! docker info &>/dev/null; then
+    warn "Starting Docker daemon..."
+    $SUDO systemctl enable --now docker 2>/dev/null || $SUDO dockerd &>/dev/null &
+    sleep 3
+  fi
+  info "Docker daemon is running"
+
+  if ! docker compose version &>/dev/null; then
+    warn "Docker Compose not found — installing plugin..."
+    $SUDO mkdir -p /usr/local/lib/docker/cli-plugins
+    $SUDO curl -fsSL "https://github.com/docker/compose/releases/latest/download/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/lib/docker/cli-plugins/docker-compose
+    $SUDO chmod +x /usr/local/lib/docker/cli-plugins/docker-compose
+  fi
+  info "Docker Compose: $(docker compose version 2>&1)"
+}
+
+# ─── 2. Node.js ─────────────────────────────────────────────────
+install_node() {
+  step "2/8  Installing Node.js"
+  if command -v node &>/dev/null; then
+    NODE_MAJOR=$(node -v | sed 's/v//' | cut -d. -f1)
+    if [ "$NODE_MAJOR" -lt 22 ]; then
+      warn "Node.js $(node -v) is too old — upgrading to v22..."
+    else
+      info "Node.js $(node -v) detected"
+      return 0
+    fi
+  fi
+
+  if ! command -v node &>/dev/null || [ "$NODE_MAJOR" -lt 22 ]; then
+    warn "Installing Node.js 22 LTS..."
+    if command -v apt-get &>/dev/null; then
+      curl -fsSL https://deb.nodesource.com/setup_22.x | $SUDO bash -
+      $SUDO apt-get install -y nodejs
+    elif command -v dnf &>/dev/null; then
+      curl -fsSL https://rpm.nodesource.com/setup_22.x | $SUDO bash -
+      $SUDO dnf install -y nodejs
+    elif command -v yum &>/dev/null; then
+      curl -fsSL https://rpm.nodesource.com/setup_22.x | $SUDO bash -
+      $SUDO yum install -y nodejs
+    else
+      warn "Package manager not recognised — trying nvm..."
+      curl -fsSL https://raw.githubusercontent.com/nvm-sh/nvm/v0.40.1/install.sh | bash
+      export NVM_DIR="$HOME/.nvm"
+      [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"
+      nvm install 22
+      nvm alias default 22
+    fi
+  fi
+  info "Node.js $(node -v) ready"
+}
+
+# ─── 3. Install prerequisites if needed ──────────────────────────
+if [ "$SKIP_PREREQS" != "true" ]; then
+  install_docker
+  install_node
+else
+  step "1-2/8  Skipping prerequisites (SKIP_PREREQS=true)"
+fi
+
+# ─── 4. Download project ─────────────────────────────────────────
+step "3/8  Downloading SSO Service"
 if [ -d "$INSTALL_DIR/.git" ]; then
  cd "$INSTALL_DIR"
  git pull --ff-only 2>/dev/null && info "Updated existing installation" || warn "Could not git pull, continuing"
 else
  mkdir -p "$INSTALL_DIR"
  if command -v git &>/dev/null; then
-    git clone --depth 1 "https://github.com/$REPO.git" "$INSTALL_DIR"
+    git clone --depth 1 "https://github.com/$REPO.git" "$INSTALL_DIR" 2>&1
  else
+    warn "git not found, downloading archive..."
    curl -fsSL "https://github.com/$REPO/archive/refs/heads/$BRANCH.tar.gz" | tar xz --strip=1 -C "$INSTALL_DIR"
  fi
  info "Downloaded to $INSTALL_DIR"
 fi
 cd "$INSTALL_DIR"

-# ─── .env ────────────────────────────────────────────────────────
-step "3/7  Configuring environment"
+# ─── 5. .env ─────────────────────────────────────────────────────
+step "4/8  Configuring environment"
 if [ ! -f .env ]; then
  cp .env.example .env
-  sed -i "s/change-me-access-secret-at-least-32-chars/$(openssl rand -hex 32)/" .env
-  sed -i "s/change-me-refresh-secret-at-least-32-chars/$(openssl rand -hex 32)/" .env
-  info "Created .env with random secrets"
+  # Генерация случайных JWT-секретов (32 байта hex = 64 символа)
+  JWT_ACCESS=$(openssl rand -hex 32 2>/dev/null || node -e "process.stdout.write(require('crypto').randomBytes(32).toString('hex'))")
+  JWT_REFRESH=$(openssl rand -hex 32 2>/dev/null || node -e "process.stdout.write(require('crypto').randomBytes(32).toString('hex'))")
+  if [ "$(uname -s)" = "Darwin" ]; then
+    sed -i '' "s/change-me-access-secret-at-least-32-chars/$JWT_ACCESS/" .env
+    sed -i '' "s/change-me-refresh-secret-at-least-32-chars/$JWT_REFRESH/" .env
+  else
+    sed -i "s/change-me-access-secret-at-least-32-chars/$JWT_ACCESS/" .env
+    sed -i "s/change-me-refresh-secret-at-least-32-chars/$JWT_REFRESH/" .env
+  fi
+  info "Created .env with random JWT secrets"
 else
  info ".env already exists, keeping it"
 fi

-# shellcheck source=/dev/null
 set -a; source .env; set +a

-# ─── Docker ──────────────────────────────────────────────────────
-step "4/7  Starting infrastructure (PostgreSQL, Redis, RabbitMQ)"
-docker compose up -d 2>&1
+# ─── 6. Docker infrastructure ────────────────────────────────────
+step "5/8  Starting infrastructure (PostgreSQL, Redis, RabbitMQ)"
+$SUDO docker compose up -d 2>&1

 info "Waiting for PostgreSQL..."
 for i in $(seq 1 30); do
-  if docker compose exec -T postgres pg_isready -U "${POSTGRES_USER}" -d "${POSTGRES_DB}" &>/dev/null; then
+  if $SUDO docker compose exec -T postgres pg_isready -U "${POSTGRES_USER}" -d "${POSTGRES_DB}" &>/dev/null; then
    info "PostgreSQL is ready"
    break
  fi
-  [ "$i" -eq 30 ] && error "PostgreSQL did not start in time. Check: docker compose logs postgres"
+  [ "$i" -eq 30 ] && error "PostgreSQL did not start in time. Check: $SUDO docker compose logs postgres"
  sleep 2
 done

-# ─── Dependencies & Prisma ──────────────────────────────────────
-step "5/7  Installing dependencies and generating Prisma client"
+info "Waiting for Redis..."
+for i in $(seq 1 15); do
+  if $SUDO docker compose exec -T redis redis-cli ping 2>/dev/null | grep -q PONG; then
+    info "Redis is ready"
+    break
+  fi
+  [ "$i" -eq 15 ] && warn "Redis may not be ready yet, continuing..."
+  sleep 2
+done
+
+# ─── 7. Dependencies & Prisma ────────────────────────────────────
+step "6/8  Installing dependencies"
 npm ci --no-audit --no-fund 2>&1 | tail -1
+info "npm dependencies installed"
+
 npx prisma generate 2>&1 | tail -1
+info "Prisma client generated"

 export DATABASE_URL
 npx prisma db push --skip-generate 2>&1
 info "Database schema applied"

-npx ts-node prisma/seed.ts 2>&1
+# ─── 8. Seed ─────────────────────────────────────────────────────
+step "7/8  Seeding database"
+npx ts-node -P tsconfig.json prisma/seed.ts 2>&1
 info "Seed data created"

-# ─── Build ──────────────────────────────────────────────────────
-echo ""
+# ─── 9. Build & Start ────────────────────────────────────────────
+step "8/8  Building and starting SSO Service"
 npm run build 2>&1 | tail -3
 info "Application built"

-# ─── Start ──────────────────────────────────────────────────────
-step "6/7  Starting SSO Service"
 if command -v pm2 &>/dev/null; then
  pm2 delete sso-service 2>/dev/null || true
  pm2 start npm --name "sso-service" -- run start:prod
-  pm2 save
+  pm2 save 2>/dev/null || true
  info "Started with PM2"
 else
-  PORT="${PORT:-3000}" nohup node dist/main > sso.log 2>&1 &
-  echo $! > .sso.pid
-  info "Started in background (PID $(cat .sso.pid)), logs: sso.log"
+  PORT="${PORT:-3000}" nohup node dist/main > "$INSTALL_DIR/sso.log" 2>&1 &
+  echo $! > "$INSTALL_DIR/.sso.pid"
+  info "Started in background (PID $(cat "$INSTALL_DIR/.sso.pid")) — logs: $INSTALL_DIR/sso.log"
 fi

 sleep 3
-if curl -sfo /dev/null http://localhost:"${PORT:-3000}"/metrics 2>/dev/null; then
+if curl -sfo /dev/null "http://localhost:${PORT:-3000}/metrics" 2>/dev/null; then
  info "Service is running on http://localhost:${PORT:-3000}"
 else
-  warn "Service may still be starting... check sso.log"
+  warn "Service may still be starting... check: $INSTALL_DIR/sso.log"
 fi

 # ─── Done ────────────────────────────────────────────────────────
-step "7/7  Installation complete!"
 echo ""
-echo -e "  ${GREEN}Web panel:${NC}      http://localhost:${PORT:-3000}"
-echo -e "  ${GREEN}Admin login:${NC}     admin@sso.local / admin123!"
-echo -e "  ${GREEN}Metrics:${NC}         http://localhost:${PORT:-3000}/metrics"
-echo -e "  ${GREEN}RabbitMQ UI:${NC}     http://localhost:15672 (sso / sso_secret)"
+echo -e "${GREEN}════════════════════════════════════════════════${NC}"
+echo -e "${GREEN}  SSO Service installed and running!${NC}"
+echo -e "${GREEN}════════════════════════════════════════════════${NC}"
 echo ""
-echo -e "  ${YELLOW}To stop:${NC}         kill \$(cat $INSTALL_DIR/.sso.pid)  (or pm2 stop sso-service)"
-echo -e "  ${YELLOW}To update:${NC}       cd $INSTALL_DIR && git pull && npm ci && npm run build && npm run start:prod"
+echo -e "  ${CYAN}Web panel:${NC}      http://localhost:${PORT:-3000}"
+echo -e "  ${CYAN}Admin login:${NC}     admin@sso.local / admin123!"
+echo -e "  ${CYAN}Metrics:${NC}         http://localhost:${PORT:-3000}/metrics"
+echo -e "  ${CYAN}RabbitMQ UI:${NC}     http://localhost:15672 (${RABBITMQ_USER:-sso} / ${RABBITMQ_PASSWORD:-sso_secret})"
+echo ""
+echo -e "  ${YELLOW}Install dir:${NC}    $INSTALL_DIR"
+echo -e "  ${YELLOW}Log file:${NC}       $INSTALL_DIR/sso.log"
+echo ""
+echo -e "  ${YELLOW}Stop:${NC}           $(command -v pm2 &>/dev/null && echo 'pm2 stop sso-service' || echo "kill \$(cat $INSTALL_DIR/.sso.pid)")"
+echo -e "  ${YELLOW}Update:${NC}         cd $INSTALL_DIR && git pull && npm ci && npm run build && npm run start:prod"
+echo -e "  ${YELLOW}Re-run:${NC}         curl -fsSL https://github.com/${REPO}/raw/${BRANCH}/install.sh | bash"
+echo ""
+echo -e "  ${GREEN}Open http://localhost:${PORT:-3000} in your browser${NC}"
 echo ""