xip/Makefile at main · pullpreview/xip · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
SHELL := /bin/bash

BINARY := xip
GO ?= mise x -- go
GOSUMDB ?= sum.golang.org

DIST_DIR := dist
BUILD_OUTPUT := $(DIST_DIR)/$(BINARY)
LINUX_AMD64_OUTPUT := $(DIST_DIR)/$(BINARY)-linux-amd64

SYSTEMD_UNIT_LOCAL := deploy/$(BINARY).service
LOGROTATE_LOCAL := deploy/$(BINARY).logrotate
LOCAL_ENV_FILE := config/.env

REMOTE_BIN ?= /usr/local/bin/$(BINARY)
REMOTE_SYSTEMD_UNIT ?= /etc/systemd/system/$(BINARY).service
REMOTE_ENV_FILE ?= /etc/default/$(BINARY)
REMOTE_LOGROTATE ?= /etc/logrotate.d/$(BINARY)
REMOTE_TMP_DIR ?= /tmp/$(BINARY)-deploy
REMOTE_CONFIG_DIR ?= /etc/$(BINARY)
REMOTE_BLOCKLIST_FILE ?= $(REMOTE_CONFIG_DIR)/blocklist.csv

SSH_USER ?= root
SSH_PORT ?= 22
REMOTE_HOST ?= xip.preview.run
TARGET_HOST := $(REMOTE_HOST)
SSH_TARGET := $(SSH_USER)@$(TARGET_HOST)
LOCAL_BLOCKLIST_FILE ?= config/blocklist.csv
SSH := ssh -p $(SSH_PORT)
SCP := scp -P $(SSH_PORT)

.PHONY: build build-linux-amd64 test run deploy deploy-check blocklist clean
.PHONY: fmt check-fmt lint precommit-install precommit-run

build:
	mkdir -p $(DIST_DIR)
	GOSUMDB=$(GOSUMDB) $(GO) build -trimpath -o $(BUILD_OUTPUT) ./cmd/$(BINARY)

build-linux-amd64:
	mkdir -p $(DIST_DIR)
	GOOS=linux GOARCH=amd64 CGO_ENABLED=0 GOSUMDB=$(GOSUMDB) $(GO) build -trimpath -ldflags='-s -w' -o $(LINUX_AMD64_OUTPUT) ./cmd/$(BINARY)

test:
	GOSUMDB=$(GOSUMDB) $(GO) test ./...

fmt:
	GOSUMDB=$(GOSUMDB) $(GO) fmt ./...

check-fmt:
	@unformatted="$$(mise x -- gofmt -l $$(git ls-files '*.go'))"; \
	if [ -n "$$unformatted" ]; then \
		echo "Unformatted Go files:"; \
		echo "$$unformatted"; \
		echo "Run: make fmt"; \
		exit 1; \
	fi

lint:
	GOSUMDB=$(GOSUMDB) $(GO) vet ./...

run:
	GOSUMDB=$(GOSUMDB) $(GO) run ./cmd/$(BINARY)

deploy: build-linux-amd64
	@test -n "$(TARGET_HOST)" || (echo "Set REMOTE_HOST=<host>" && exit 1)
	@test -f "$(LOCAL_ENV_FILE)" || (echo "Missing $(LOCAL_ENV_FILE). Create it from config/.env.example first." && exit 1)
	$(SSH) $(SSH_TARGET) "mkdir -p $(REMOTE_TMP_DIR)"
	$(SCP) $(LINUX_AMD64_OUTPUT) $(SSH_TARGET):$(REMOTE_TMP_DIR)/$(BINARY)
	$(SCP) $(SYSTEMD_UNIT_LOCAL) $(SSH_TARGET):$(REMOTE_TMP_DIR)/$(BINARY).service
	$(SCP) $(LOGROTATE_LOCAL) $(SSH_TARGET):$(REMOTE_TMP_DIR)/$(BINARY).logrotate
	$(SCP) $(LOCAL_ENV_FILE) $(SSH_TARGET):$(REMOTE_TMP_DIR)/$(BINARY).env
	$(SSH) $(SSH_TARGET) "sudo install -m 0755 $(REMOTE_TMP_DIR)/$(BINARY) $(REMOTE_BIN) && \
		sudo install -m 0644 $(REMOTE_TMP_DIR)/$(BINARY).service $(REMOTE_SYSTEMD_UNIT) && \
		sudo install -m 0644 $(REMOTE_TMP_DIR)/$(BINARY).logrotate $(REMOTE_LOGROTATE) && \
		sudo install -m 0644 $(REMOTE_TMP_DIR)/$(BINARY).env $(REMOTE_ENV_FILE) && \
		sudo install -d -m 0755 $(REMOTE_CONFIG_DIR) && \
		sudo install -d -m 0755 $(REMOTE_CONFIG_DIR)/acme-cache && \
		sudo touch $(REMOTE_BLOCKLIST_FILE) && \
		sudo chmod 0644 $(REMOTE_BLOCKLIST_FILE) && \
		sudo install -d -m 0755 /var/log/$(BINARY) && \
		sudo touch /var/log/$(BINARY)/$(BINARY).log && \
		sudo chmod 0640 /var/log/$(BINARY)/$(BINARY).log && \
		sudo systemctl daemon-reload && \
		sudo systemctl enable --now $(BINARY).service && \
		sudo systemctl restart $(BINARY).service && \
		rm -rf $(REMOTE_TMP_DIR)"

blocklist:
	@test -f "$(LOCAL_BLOCKLIST_FILE)" || (echo "Missing $(LOCAL_BLOCKLIST_FILE)." && exit 1)
	$(SSH) $(SSH_TARGET) "mkdir -p $(REMOTE_TMP_DIR)"
	$(SCP) $(LOCAL_BLOCKLIST_FILE) $(SSH_TARGET):$(REMOTE_TMP_DIR)/blocklist.csv
	$(SSH) $(SSH_TARGET) "sudo install -d -m 0755 $(REMOTE_CONFIG_DIR) && \
		sudo install -m 0644 $(REMOTE_TMP_DIR)/blocklist.csv $(REMOTE_BLOCKLIST_FILE) && \
		rm -rf $(REMOTE_TMP_DIR)"

deploy-check:
	@test -n "$(TARGET_HOST)" || (echo "Set REMOTE_HOST=<host>" && exit 1)
	$(SSH) $(SSH_TARGET) "sudo systemctl is-active --quiet $(BINARY).service && echo '$(BINARY).service is active' && \
		echo 'Last 100 log lines (/var/log/$(BINARY)/$(BINARY).log):' && \
		sudo tail -n 100 /var/log/$(BINARY)/$(BINARY).log"

clean:
	rm -rf $(DIST_DIR)

precommit-install:
	pre-commit install --install-hooks --hook-type pre-commit

precommit-run:
	pre-commit run --all-files