first implementation

scripts/deploy/deploy-hetzner.sh

@@ -0,0 +1,201 @@
+#!/bin/bash
+
+# Deploy to Hetzner server via SSH
+# Usage: ./deploy-hetzner.sh [environment] [service]
+# Example: ./deploy-hetzner.sh staging all
+# Example: ./deploy-hetzner.sh production chat-backend
+
+set -e
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+# Configuration
+ENVIRONMENT=${1:-"staging"}
+SERVICE=${2:-"all"}
+
+# Environment-specific variables
+if [ "$ENVIRONMENT" == "production" ]; then
+    SSH_HOST=${PRODUCTION_HOST}
+    SSH_USER=${PRODUCTION_USER}
+    SSH_KEY=${PRODUCTION_SSH_KEY}
+    DEPLOY_DIR="~/manacore-production"
+    COMPOSE_FILE="docker-compose.production.yml"
+else
+    SSH_HOST=${STAGING_HOST}
+    SSH_USER=${STAGING_USER}
+    SSH_KEY=${STAGING_SSH_KEY}
+    DEPLOY_DIR="~/manacore-staging"
+    COMPOSE_FILE="docker-compose.staging.yml"
+fi
+
+# Function to print colored output
+log_info() {
+    echo -e "${GREEN}[INFO]${NC} $1"
+}
+
+log_warn() {
+    echo -e "${YELLOW}[WARN]${NC} $1"
+}
+
+log_error() {
+    echo -e "${RED}[ERROR]${NC} $1"
+}
+
+# Validate required variables
+if [ -z "$SSH_HOST" ] || [ -z "$SSH_USER" ]; then
+    log_error "SSH configuration missing for ${ENVIRONMENT}"
+    log_error "Please set: ${ENVIRONMENT^^}_HOST and ${ENVIRONMENT^^}_USER"
+    exit 1
+fi
+
+# SSH command helper
+ssh_exec() {
+    if [ -n "$SSH_KEY" ]; then
+        ssh -i "$SSH_KEY" -o StrictHostKeyChecking=no "${SSH_USER}@${SSH_HOST}" "$@"
+    else
+        ssh -o StrictHostKeyChecking=no "${SSH_USER}@${SSH_HOST}" "$@"
+    fi
+}
+
+# SCP command helper
+scp_copy() {
+    if [ -n "$SSH_KEY" ]; then
+        scp -i "$SSH_KEY" -o StrictHostKeyChecking=no "$@"
+    else
+        scp -o StrictHostKeyChecking=no "$@"
+    fi
+}
+
+log_info "Starting deployment to ${ENVIRONMENT}..."
+log_info "Target: ${SSH_USER}@${SSH_HOST}"
+log_info "Service: ${SERVICE}"
+echo ""
+
+# Step 1: Prepare deployment directory
+log_info "Preparing deployment directory..."
+ssh_exec << EOF
+    mkdir -p ${DEPLOY_DIR}
+    mkdir -p ${DEPLOY_DIR}/logs
+    mkdir -p ${DEPLOY_DIR}/backups
+    cd ${DEPLOY_DIR}
+EOF
+
+# Step 2: Copy docker-compose file
+log_info "Copying docker-compose configuration..."
+scp_copy "${COMPOSE_FILE}" "${SSH_USER}@${SSH_HOST}:${DEPLOY_DIR}/docker-compose.yml"
+
+# Step 3: Copy environment file if exists
+if [ -f ".env.${ENVIRONMENT}" ]; then
+    log_info "Copying environment configuration..."
+    scp_copy ".env.${ENVIRONMENT}" "${SSH_USER}@${SSH_HOST}:${DEPLOY_DIR}/.env"
+else
+    log_warn "No .env.${ENVIRONMENT} file found, using existing environment"
+fi
+
+# Step 4: Pull latest images
+log_info "Pulling latest Docker images..."
+ssh_exec << EOF
+    cd ${DEPLOY_DIR}
+    docker compose pull ${SERVICE}
+EOF
+
+# Step 5: Run migrations if needed
+if [ "$SERVICE" == "all" ] || [ "$SERVICE" == "mana-core-auth" ]; then
+    log_info "Running database migrations..."
+    ssh_exec << EOF
+        cd ${DEPLOY_DIR}
+        docker compose run --rm mana-core-auth pnpm run db:migrate || echo "Migrations completed or skipped"
+EOF
+fi
+
+# Step 6: Deploy services
+log_info "Deploying services..."
+if [ "$SERVICE" == "all" ]; then
+    # Zero-downtime rolling update for all services
+    ssh_exec << 'EOF'
+        cd ${DEPLOY_DIR}
+
+        SERVICES=$(docker compose config --services)
+
+        for service in $SERVICES; do
+            echo "Deploying $service..."
+
+            # Scale up with new version
+            docker compose up -d --no-deps --scale $service=2 $service
+            sleep 15
+
+            # Scale down to single instance
+            docker compose up -d --no-deps --scale $service=1 $service
+            sleep 5
+        done
+
+        # Cleanup old images
+        docker image prune -f
+EOF
+else
+    # Deploy single service
+    ssh_exec << EOF
+        cd ${DEPLOY_DIR}
+        docker compose up -d --no-deps ${SERVICE}
+        sleep 10
+EOF
+fi
+
+# Step 7: Health checks
+log_info "Running health checks..."
+HEALTH_ENDPOINTS=(
+    "mana-core-auth:3001:/api/v1/health"
+    "maerchenzauber-backend:3002:/health"
+    "chat-backend:3002:/api/health"
+)
+
+FAILED_CHECKS=0
+
+for endpoint in "${HEALTH_ENDPOINTS[@]}"; do
+    IFS=':' read -r service port path <<< "$endpoint"
+
+    log_info "Checking health of ${service}..."
+
+    if ssh_exec << EOF
+        HEALTH=\$(docker compose -f ${DEPLOY_DIR}/docker-compose.yml exec -T ${service} wget -q -O - http://localhost:${port}${path} 2>/dev/null || echo "FAILED")
+
+        if [[ "\$HEALTH" == *"FAILED"* ]]; then
+            echo "Health check failed for ${service}"
+            exit 1
+        else
+            echo "Health check passed for ${service}"
+            exit 0
+        fi
+EOF
+    then
+        log_info "✅ ${service} is healthy"
+    else
+        log_error "❌ ${service} health check failed"
+        ((FAILED_CHECKS++))
+    fi
+done
+
+echo ""
+
+# Step 8: Display service status
+log_info "Current service status:"
+ssh_exec << EOF
+    cd ${DEPLOY_DIR}
+    docker compose ps
+EOF
+
+echo ""
+
+# Final result
+if [ $FAILED_CHECKS -eq 0 ]; then
+    log_info "Deployment to ${ENVIRONMENT} completed successfully! ✅"
+    exit 0
+else
+    log_error "Deployment completed with ${FAILED_CHECKS} failed health checks"
+    log_warn "Please check service logs with: ssh ${SSH_USER}@${SSH_HOST} 'cd ${DEPLOY_DIR} && docker compose logs'"
+    exit 1
+fi