fb4bf56816
debian/DEBIAN/control: package metadata, depends on python3.11+, postgresql-client debian/DEBIAN/postinst: creates activeblue-ai system user, installs venv, enables service debian/DEBIAN/prerm: stops and disables service before removal debian/DEBIAN/postrm: purge removes config, logs, venv, and system user debian/lib/systemd/system/activeblue-ai.service: - Runs as dedicated user with PrivateTmp + ProtectSystem hardening - EnvironmentFile=/etc/activeblue-ai/.env - Restart=on-failure with 5s backoff debian/usr/bin/activeblue-ai: CLI with start/stop/restart/status/logs/migrate/health/sweep/privacy/version build_deb.sh: builds activeblue-ai_X.Y.Z_all.deb in dist/ publish_repo.sh: scans packages, generates Release + checksums, optional GPG signing Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
48 lines
1.5 KiB
Bash
48 lines
1.5 KiB
Bash
#!/bin/bash
|
|
set -e
|
|
|
|
SERVICE_DIR="/usr/lib/activeblue-ai"
|
|
VENV_DIR="$SERVICE_DIR/venv"
|
|
CONFIG_DIR="/etc/activeblue-ai"
|
|
LOG_DIR="/var/log/activeblue-ai"
|
|
DATA_DIR="/var/lib/activeblue-ai"
|
|
SERVICE_USER="activeblue-ai"
|
|
|
|
# Create service user
|
|
if ! id "$SERVICE_USER" &>/dev/null; then
|
|
adduser --system --no-create-home --group --disabled-login \
|
|
--home "$DATA_DIR" "$SERVICE_USER"
|
|
echo "Created service user: $SERVICE_USER"
|
|
fi
|
|
|
|
# Create directories
|
|
install -d -m 755 -o "$SERVICE_USER" -g "$SERVICE_USER" "$LOG_DIR"
|
|
install -d -m 755 -o "$SERVICE_USER" -g "$SERVICE_USER" "$DATA_DIR"
|
|
install -d -m 750 -o "$SERVICE_USER" -g "$SERVICE_USER" "$CONFIG_DIR"
|
|
|
|
# Create .env if it doesn't exist
|
|
if [ ! -f "$CONFIG_DIR/.env" ]; then
|
|
cp "$CONFIG_DIR/.env.example" "$CONFIG_DIR/.env" 2>/dev/null || true
|
|
chmod 640 "$CONFIG_DIR/.env"
|
|
chown "$SERVICE_USER:$SERVICE_USER" "$CONFIG_DIR/.env"
|
|
echo "NOTE: Edit $CONFIG_DIR/.env before starting the service."
|
|
fi
|
|
|
|
# Create and populate virtualenv
|
|
if [ ! -d "$VENV_DIR" ]; then
|
|
python3 -m venv "$VENV_DIR"
|
|
fi
|
|
"$VENV_DIR/bin/pip" install --quiet --upgrade pip
|
|
"$VENV_DIR/bin/pip" install --quiet -r "$SERVICE_DIR/requirements.txt"
|
|
|
|
# Enable and reload systemd
|
|
if command -v systemctl &>/dev/null && systemctl is-system-running --quiet 2>/dev/null; then
|
|
systemctl daemon-reload
|
|
systemctl enable activeblue-ai.service
|
|
echo "Service enabled. Run: systemctl start activeblue-ai"
|
|
fi
|
|
|
|
echo "ActiveBlue AI installed successfully."
|
|
echo "Configure: $CONFIG_DIR/.env"
|
|
echo "Run migrations: activeblue-ai migrate"
|