wangjia
824992fe6e
- nginx-jiu-ali.conf：443 ssl+http2 正式入口（HSTS/XFO/nosniff 安全头、 ACME webroot 续期通道、80→443 跳转）；8443 明文过渡口拆除 - 客户端构建 URL 全量回切 https://jiu.51yanmei.com（compile×5/local_test/ release-client/notify） - 流水线去 EC2：deploy-client/site 单轨 Ali、manual 回滚与每日备份切 ali、 seed/reset/debug-db 改容器内取密码（SEC-003，退役 DB_PASSWORD secret） Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JJ1g8XV1YhhmHRzhwWEW7o
73 lines
2.6 KiB
YAML
73 lines
2.6 KiB
YAML
name: Reset DB
|
||
|
||
on:
|
||
workflow_dispatch:
|
||
inputs:
|
||
shops:
|
||
description: '写入的门店（逗号分隔，如 S001,S002,S003）'
|
||
required: true
|
||
default: 'S001,S002,S003'
|
||
|
||
jobs:
|
||
reset:
|
||
runs-on: mac
|
||
steps:
|
||
- uses: actions/checkout@v4
|
||
|
||
- name: Setup SSH
|
||
run: |
|
||
mkdir -p ~/.ssh
|
||
printf '%s' "${{ secrets.ALI_SSH_KEY }}" > ~/.ssh/ec2_deploy.pem
|
||
chmod 600 ~/.ssh/ec2_deploy.pem
|
||
ssh-keyscan -H ${{ secrets.ALI_HOST }} >> ~/.ssh/known_hosts
|
||
|
||
- name: Reset database & reseed
|
||
env:
|
||
EC2_HOST: ${{ secrets.ALI_HOST }}
|
||
EC2_USER: ${{ secrets.ALI_USER }}
|
||
SHOPS: ${{ github.event.inputs.shops }}
|
||
run: |
|
||
# 1. 清库重建
|
||
ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} \
|
||
"docker exec jiu_mysql sh -c 'exec mysql -uroot -p\$MYSQL_ROOT_PASSWORD -e \"DROP DATABASE IF EXISTS jiu_db; CREATE DATABASE jiu_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;\"'"
|
||
echo "✓ Database reset"
|
||
|
||
# 2. 重启 jiu-server，AutoMigrate 重建表结构
|
||
ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} \
|
||
"sudo systemctl restart jiu"
|
||
echo "✓ jiu-server restarted, waiting for AutoMigrate..."
|
||
|
||
# 3. 等待健康检查通过
|
||
for i in $(seq 1 30); do
|
||
ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} \
|
||
"curl -sf http://localhost:8080/health" && break
|
||
sleep 2
|
||
done
|
||
echo "✓ Health check passed"
|
||
|
||
# 4. 写入 seed 数据（第一个 shop 全量，后续跳过 TRUNCATE 行避免互相清空）
|
||
FIRST=true
|
||
for SHOP in $(echo "$SHOPS" | tr ',' ' '); do
|
||
FILE="backend/seeds/${SHOP}.sql"
|
||
if [ ! -f "$FILE" ]; then
|
||
echo "⚠️ $FILE not found, skipping"
|
||
continue
|
||
fi
|
||
echo "→ Seeding $SHOP ..."
|
||
if [ "$FIRST" = "true" ]; then
|
||
ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} \
|
||
"docker exec -i jiu_mysql sh -c 'exec mysql -uroot -p\$MYSQL_ROOT_PASSWORD --default-character-set=utf8mb4 jiu_db'" \
|
||
< "$FILE"
|
||
FIRST=false
|
||
else
|
||
grep -v "^TRUNCATE" "$FILE" | \
|
||
ssh -i ~/.ssh/ec2_deploy.pem ${EC2_USER}@${EC2_HOST} \
|
||
"docker exec -i jiu_mysql sh -c 'exec mysql -uroot -p\$MYSQL_ROOT_PASSWORD --default-character-set=utf8mb4 jiu_db'"
|
||
fi
|
||
echo "✓ $SHOP done"
|
||
done
|
||
|
||
- name: Cleanup SSH key
|
||
if: always()
|
||
run: rm -f ~/.ssh/ec2_deploy.pem
|