tajniak81andClaude Opus 4.8
30c9cdebe9
Introduce registry-pull production stacks (docker-compose.prod.yml) for both the multi-container Docker setup and the all-in-one Docker AIO image, with everything an operator needs (superuser, super-admin, ports, volumes) driven from .env. The API Server now bootstraps PocketBase on startup: a new internal/bootstrap package (Go port of setup-pocketbase.mjs) creates missing collections, reconciles existing ones, and creates the DriverVault super-admin from DRIVERVAULT_SUPERADMIN_* when absent. Idempotent and gated by PB_BOOTSTRAP. The PocketBase superuser is still upserted by the PocketBase container, since the REST API cannot bootstrap the first superuser. Move PocketBase to port 8070 (internal + published) and the web app to 8090 across both stacks, with matching CORS defaults. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
102 lines
3.3 KiB
Go
102 lines
3.3 KiB
Go
// Command server runs the DriverVault API Server. It is the single gateway
|
|
// between clients (web app, phone app, Home Assistant plugin, ESP32 device) and
|
|
// the PocketBase database kept behind it — clients never talk to PocketBase
|
|
// directly. It also serves the superadmin web panel at the server root.
|
|
package main
|
|
|
|
import (
|
|
"context"
|
|
"errors"
|
|
"log"
|
|
"net/http"
|
|
"os"
|
|
"os/signal"
|
|
"syscall"
|
|
"time"
|
|
|
|
"drivervault/apiserver/internal/api"
|
|
"drivervault/apiserver/internal/bootstrap"
|
|
"drivervault/apiserver/internal/config"
|
|
"drivervault/apiserver/internal/pb"
|
|
)
|
|
|
|
func main() {
|
|
log.SetFlags(log.LstdFlags | log.Lmsgprefix)
|
|
log.SetPrefix("[api] ")
|
|
|
|
cfg := config.Load()
|
|
|
|
client := pb.New(cfg.PocketBaseURL, cfg.PocketBaseAdminEmail, cfg.PocketBaseAdminPassword)
|
|
|
|
// Authenticate the service account up front so the first request doesn't pay
|
|
// for it. A failure is NOT fatal: the PocketBase connection is editable at
|
|
// runtime from the panel, so a superadmin must be able to log in and fix a
|
|
// bad address or bad credentials.
|
|
if cfg.AdminConfigured() {
|
|
authCtx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
|
|
if err := client.Authenticate(authCtx); err != nil {
|
|
log.Printf("WARNING: PocketBase service account auth failed (%s): %v", cfg.PocketBaseURL, err)
|
|
log.Printf("fix it under Settings → PocketBase in the panel at %s", cfg.Addr)
|
|
} else {
|
|
log.Printf("authenticated to PocketBase at %s", cfg.PocketBaseURL)
|
|
}
|
|
cancel()
|
|
} else {
|
|
log.Println("WARNING: POCKETBASE_ADMIN_EMAIL/PASSWORD unset — management endpoints return 503 until configured")
|
|
}
|
|
|
|
// Bring PocketBase up to the expected schema (create missing collections,
|
|
// reconcile existing ones) and ensure the super-admin. Idempotent, so it runs
|
|
// on every boot. Non-fatal: a fresh PocketBase that isn't reachable yet, or a
|
|
// bad service account, must not stop the panel from coming up so a superadmin
|
|
// can log in and fix the connection.
|
|
if cfg.Bootstrap && cfg.AdminConfigured() {
|
|
bootCtx, cancel := context.WithTimeout(context.Background(), 60*time.Second)
|
|
if err := bootstrap.Run(bootCtx, client, bootstrap.Options{
|
|
UsersCollection: cfg.UsersCollection,
|
|
SuperAdminEmail: cfg.SuperAdminEmail,
|
|
SuperAdminPassword: cfg.SuperAdminPassword,
|
|
SuperAdminName: cfg.SuperAdminName,
|
|
}); err != nil {
|
|
log.Printf("WARNING: bootstrap failed: %v", err)
|
|
} else {
|
|
log.Println("bootstrap: PocketBase schema ready")
|
|
}
|
|
cancel()
|
|
}
|
|
|
|
srv := api.New(cfg, client)
|
|
|
|
if err := srv.StartPlugins(); err != nil {
|
|
log.Printf("plugins: load failed: %v", err)
|
|
}
|
|
|
|
httpServer := &http.Server{
|
|
Addr: cfg.Addr,
|
|
Handler: srv.Handler(),
|
|
ReadHeaderTimeout: 10 * time.Second,
|
|
IdleTimeout: 60 * time.Second,
|
|
}
|
|
|
|
go func() {
|
|
log.Printf("listening on %s (PocketBase: %s, panel at /)", cfg.Addr, cfg.PocketBaseURL)
|
|
if err := httpServer.ListenAndServe(); err != nil && !errors.Is(err, http.ErrServerClosed) {
|
|
log.Fatalf("server error: %v", err)
|
|
}
|
|
}()
|
|
|
|
// Graceful shutdown on SIGINT/SIGTERM.
|
|
stop := make(chan os.Signal, 1)
|
|
signal.Notify(stop, os.Interrupt, syscall.SIGTERM)
|
|
<-stop
|
|
log.Println("shutting down...")
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), 10*time.Second)
|
|
defer cancel()
|
|
srv.Stop(ctx)
|
|
if err := httpServer.Shutdown(ctx); err != nil {
|
|
log.Printf("shutdown error: %v", err)
|
|
}
|
|
log.Println("stopped")
|
|
}
|