add server deployment CI

.gitlab-ci.yml

@@ -23,6 +23,11 @@ cache:
     - .cache/pip
     - venv/
 
+stages:
+  - build
+  - test
+  - deploy
+
 build-job:
   stage: build
   script:
@@ -48,14 +53,26 @@ test-job2:
     - source venv/bin/activate
     - mypy --config-file=pyproject.toml server
 
-
-#pages:
-#  script:
-#    - pip install sphinx sphinx-rtd-theme
-#    - cd doc ; make html
-#    - mv build/html/ ../public/
-#  artifacts:
-#    paths:
-#      - public
-#  rules:
-#    - if: $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH
+deploy-to-production:
+  stage: deploy
+  script:
+    - echo "Becoming 'nacsos' user"
+    - su - nacsos
+    - cd /home/nacsos/nacsos-core
+    - echo "Stopping NACSOS-core service"
+    - systemctl --user stop nacsos-core
+    - echo "Dropping virtual environment"
+    - rm -rf venv
+    - echo "Fetching updated source"
+    - git stash  # "reset" softly by stashing (in case files changed)
+    - git pull origin production  # pull from origin (production branch)
+    - echo "Creating new virtual environment"
+    - python3.10 -m venv venv
+    - source venv/bin/activate
+    - echo "Installing requirements"
+    - pip install -r requirements.txt
+    - echo "Exiting 'nacsos' user scope"
+    - echo "Starting NACSOS-core service"
+    - systemctl --user start nacsos-core
+  only:
+    - production

README.md

@@ -3,6 +3,10 @@ This repository contains the core data management platform of NACSOS.
 It accesses the database via the `nacsos-data` package and exposes the functionality via an API.
 It also serves the web frontend.
 
+```
+pg_dump -d nacsos_core -h localhost -U root -W -p 5432 > dump.sql
+```
+ 
 ## Installation
 - Requires Python 3.10+, tested with Python 3.10.2
 

deploy.sh

+echo "Stopping NACSOS-core service"
+syetemctl stop nacos-core
+
+echo "Becoming 'nacsos' user"
+su - nacsos
+cd /home/nacsos/nacsos-core
+
+echo "Dropping virtual environment"
+rm -rf venv
+
+echo "Fetching updated source"
+# "reset" softly by stashing (in case files changed)
+git stash
+# pull from origin (production branch)
+git pull origin production
+
+echo "Creating new virtual environment"
+python3.10 -m venv venv
+source venv/bin/activate
+
+echo "Installing requirements"
+pip install -r requirements.txt
+
+echo "Exiting 'nacsos' user scope"
+exit
+
+echo "Starting NACSOS-core service"
+systemctl start nacsos-core

server.md

+
+Postgres users:
+```
+nacsos (admin): $v5aCh$kGE9ybF@XtE*%CETA&4bXt8vu$NTZUxi*J@f%
+nacsos_user (user): HqVxmmuJgPR#4dYL8m%32JLG$c#%kkwqoWB4vQay@Rbr
+```
+
+UNIX users:
+```
+username: nacsos
+password: none
+home at /home/nacsos
+(not sudo, no extra groups)
+```
+
+## Systemd Setup
+
+### NACSOS-core
+Create `/.config/systemd/user/nacsos-core.service`
+
+```
+[Unit]
+Description=NACSOS core server
+After=network.target
+
+[Service]
+User=nacsos
+WorkingDirectory=/home/nacsos/nacsos-core
+LimitNOFILE=4096
+ExecStart=/home/nacsos/nacsos-core/venv/bin/python -m hypercorn main:app --config=config/hypercorn-server.toml
+Restart=on-failure
+RestartSec=5s
+
+[Install]
+WantedBy=multi-user.target
+```
+
+```bash
+sudo systemctl daemon-reload
+sudo systemctl enable nacsos-core
+sudo systemctl start nacsos-core
+```
+
+
+### NACSOS-pipes
+Create `/etc/systemd/system/nacsos-pipes.service`
+
+```
+[Unit]
+Description=NACSOS core server
+After=network.target
+
+[Service]
+User=nacsos
+WorkingDirectory=/home/nacsos/nacsos-core
+LimitNOFILE=4096
+ExecStart=/home/nacsos/nacsos-core/venv/bin/python -m hypercorn main:app --config=config/hypercorn-server.toml
+Restart=on-failure
+RestartSec=5s
+
+[Install]
+WantedBy=multi-user.target
+```
\ No newline at end of file