124 lines
4.6 KiB
Python
124 lines
4.6 KiB
Python
"""运维入口通过终端隐式输入密码，不接受命令行秘密。"""
|
|
|
|
import argparse
|
|
import getpass
|
|
import json
|
|
import os
|
|
from pathlib import Path
|
|
import time
|
|
|
|
from .app import create_app
|
|
from .database import Database
|
|
from .storage import S3Objects
|
|
|
|
|
|
def application():
|
|
url = os.environ["SYNC_DATABASE_URL"]
|
|
if not url.startswith("postgresql+psycopg://"):
|
|
raise RuntimeError("生产入口只支持 PostgreSQL")
|
|
return create_app(Database(url), S3Objects(os.environ["SYNC_S3_ENDPOINT"], os.environ["SYNC_S3_BUCKET"]),
|
|
Path(os.environ["SYNC_STAGING_DIR"]))
|
|
|
|
|
|
def main():
|
|
parser = argparse.ArgumentParser()
|
|
parser.add_argument(
|
|
"command",
|
|
choices=["serve", "initialize", "migrate", "create-user", "bootstrap-user", "cleanup-uploads", "backup", "restore"],
|
|
)
|
|
parser.add_argument("--workers", type=int, choices=[1, 2], default=2)
|
|
parser.add_argument("--username")
|
|
parser.add_argument("--directory", type=Path)
|
|
parser.add_argument("--io-workers", type=int, choices=range(1, 33), default=8)
|
|
parser.add_argument("--max-age-hours", type=float, default=24)
|
|
args = parser.parse_args()
|
|
url = os.environ["SYNC_DATABASE_URL"]
|
|
if not url.startswith("postgresql+psycopg://"):
|
|
raise SystemExit("生产入口只支持 PostgreSQL")
|
|
db = Database(url)
|
|
if args.command == "initialize":
|
|
objects = S3Objects(os.environ["SYNC_S3_ENDPOINT"], os.environ["SYNC_S3_BUCKET"])
|
|
deadline = time.monotonic() + 60
|
|
while True:
|
|
try:
|
|
db.migrate()
|
|
created = objects.ensure_bucket()
|
|
print(json.dumps({"schema": 1, "bucket_created": created}))
|
|
break
|
|
except Exception:
|
|
if time.monotonic() >= deadline:
|
|
raise
|
|
time.sleep(1)
|
|
elif args.command == "backup":
|
|
if args.directory is None:
|
|
raise SystemExit("backup 需要 --directory")
|
|
from .operations import create_backup
|
|
|
|
objects = S3Objects(os.environ["SYNC_S3_ENDPOINT"], os.environ["SYNC_S3_BUCKET"])
|
|
print(
|
|
json.dumps(
|
|
create_backup(db, objects, args.directory, workers=args.io_workers)
|
|
)
|
|
)
|
|
elif args.command == "restore":
|
|
if args.directory is None:
|
|
raise SystemExit("restore 需要 --directory")
|
|
from .operations import restore_backup
|
|
|
|
objects = S3Objects(os.environ["SYNC_S3_ENDPOINT"], os.environ["SYNC_S3_BUCKET"])
|
|
print(
|
|
json.dumps(
|
|
restore_backup(
|
|
db,
|
|
objects,
|
|
args.directory,
|
|
workers=args.io_workers,
|
|
max_age_hours=args.max_age_hours,
|
|
)
|
|
)
|
|
)
|
|
elif args.command == "create-user":
|
|
db.migrate()
|
|
db.add_user(args.username or input("用户名: "), getpass.getpass("密码（至少12字符）: "))
|
|
elif args.command == "bootstrap-user":
|
|
db.migrate()
|
|
bootstrap = db.prepare_bootstrap_user(force=True)
|
|
print(json.dumps({
|
|
"event": "SYNC_BOOTSTRAP_CREDENTIALS",
|
|
"username": bootstrap["username"],
|
|
"password": bootstrap["password"],
|
|
"must_change_credentials": True,
|
|
}), flush=True)
|
|
elif args.command == "serve":
|
|
db.migrate()
|
|
bootstrap = db.prepare_bootstrap_user()
|
|
if bootstrap:
|
|
print(json.dumps({
|
|
"event": "SYNC_BOOTSTRAP_CREDENTIALS",
|
|
"username": bootstrap["username"],
|
|
"password": bootstrap["password"],
|
|
"must_change_credentials": True,
|
|
}), flush=True)
|
|
import uvicorn
|
|
host = os.environ.get("SYNC_HOST", "0.0.0.0")
|
|
if host not in {"0.0.0.0", "127.0.0.1", "::1"}:
|
|
raise SystemExit("SYNC_HOST 仅允许通配或本机回环地址")
|
|
try:
|
|
port = int(os.environ.get("SYNC_PORT", "8080"))
|
|
except ValueError as error:
|
|
raise SystemExit("SYNC_PORT 必须为有效端口") from error
|
|
if not 1 <= port <= 65535:
|
|
raise SystemExit("SYNC_PORT 必须为有效端口")
|
|
uvicorn.run("sync_server.__main__:application", factory=True, workers=args.workers,
|
|
host=host, port=port, access_log=False)
|
|
elif args.command == "cleanup-uploads":
|
|
db.migrate()
|
|
from .maintenance import cleanup_expired_uploads
|
|
print(cleanup_expired_uploads(db, Path(os.environ["SYNC_STAGING_DIR"])))
|
|
elif args.command == "migrate":
|
|
db.migrate()
|
|
|
|
|
|
if __name__ == "__main__":
|
|
main()
|