1b861494f1
Add `core prod` command with full production infrastructure tooling: - `core prod status` — parallel SSH health checks across all hosts, Galera cluster state, Redis sentinel, Docker, LB health - `core prod setup` — Phase 1 foundation: Hetzner topology discovery, managed LB creation, CloudNS DNS record management - `core prod dns` — CloudNS record CRUD with idempotent EnsureRecord - `core prod lb` — Hetzner Cloud LB status and creation - `core prod ssh <host>` — SSH into hosts defined in infra.yaml New packages: - pkg/infra: config parsing, Hetzner Cloud/Robot API, CloudNS DNS API - infra.yaml: declarative production topology (hosts, LB, DNS, SSL, Galera, Redis, containers, S3, CDN, CI/CD, monitoring, backups) Docker: - Dockerfile.app (PHP 8.3-FPM, multi-stage) - Dockerfile.web (Nginx + security headers) - docker-compose.prod.yml (app, web, horizon, scheduler, mcp, redis, galera) Ansible playbooks (runnable via `core deploy ansible`): - galera-deploy.yml, redis-deploy.yml, galera-backup.yml - inventory.yml with all production hosts CI/CD: - .forgejo/workflows/deploy.yml for Forgejo Actions pipeline Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
129 lines
2.8 KiB
Go
129 lines
2.8 KiB
Go
package prod
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
"os"
|
|
"time"
|
|
|
|
"github.com/host-uk/core/pkg/cli"
|
|
"github.com/host-uk/core/pkg/infra"
|
|
"github.com/spf13/cobra"
|
|
)
|
|
|
|
var dnsCmd = &cobra.Command{
|
|
Use: "dns",
|
|
Short: "Manage DNS records via CloudNS",
|
|
Long: `View and manage DNS records for host.uk.com via CloudNS API.
|
|
|
|
Requires:
|
|
CLOUDNS_AUTH_ID CloudNS auth ID
|
|
CLOUDNS_AUTH_PASSWORD CloudNS auth password`,
|
|
}
|
|
|
|
var dnsListCmd = &cobra.Command{
|
|
Use: "list [zone]",
|
|
Short: "List DNS records",
|
|
Args: cobra.MaximumNArgs(1),
|
|
RunE: runDNSList,
|
|
}
|
|
|
|
var dnsSetCmd = &cobra.Command{
|
|
Use: "set <host> <type> <value>",
|
|
Short: "Create or update a DNS record",
|
|
Long: `Create or update a DNS record. Example:
|
|
core prod dns set hermes.lb A 1.2.3.4
|
|
core prod dns set "*.host.uk.com" CNAME hermes.lb.host.uk.com`,
|
|
Args: cobra.ExactArgs(3),
|
|
RunE: runDNSSet,
|
|
}
|
|
|
|
var (
|
|
dnsZone string
|
|
dnsTTL int
|
|
)
|
|
|
|
func init() {
|
|
dnsCmd.PersistentFlags().StringVar(&dnsZone, "zone", "host.uk.com", "DNS zone")
|
|
|
|
dnsSetCmd.Flags().IntVar(&dnsTTL, "ttl", 300, "Record TTL in seconds")
|
|
|
|
dnsCmd.AddCommand(dnsListCmd)
|
|
dnsCmd.AddCommand(dnsSetCmd)
|
|
}
|
|
|
|
func getDNSClient() (*infra.CloudNSClient, error) {
|
|
authID := os.Getenv("CLOUDNS_AUTH_ID")
|
|
authPass := os.Getenv("CLOUDNS_AUTH_PASSWORD")
|
|
if authID == "" || authPass == "" {
|
|
return nil, fmt.Errorf("CLOUDNS_AUTH_ID and CLOUDNS_AUTH_PASSWORD required")
|
|
}
|
|
return infra.NewCloudNSClient(authID, authPass), nil
|
|
}
|
|
|
|
func runDNSList(cmd *cobra.Command, args []string) error {
|
|
dns, err := getDNSClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
zone := dnsZone
|
|
if len(args) > 0 {
|
|
zone = args[0]
|
|
}
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancel()
|
|
|
|
records, err := dns.ListRecords(ctx, zone)
|
|
if err != nil {
|
|
return fmt.Errorf("list records: %w", err)
|
|
}
|
|
|
|
cli.Print("%s DNS records for %s\n\n", cli.BoldStyle.Render("▶"), cli.TitleStyle.Render(zone))
|
|
|
|
if len(records) == 0 {
|
|
cli.Print(" No records found\n")
|
|
return nil
|
|
}
|
|
|
|
for id, r := range records {
|
|
cli.Print(" %s %-6s %-30s %s TTL:%s\n",
|
|
cli.DimStyle.Render(id),
|
|
cli.BoldStyle.Render(r.Type),
|
|
r.Host,
|
|
r.Record,
|
|
r.TTL)
|
|
}
|
|
|
|
return nil
|
|
}
|
|
|
|
func runDNSSet(cmd *cobra.Command, args []string) error {
|
|
dns, err := getDNSClient()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
host := args[0]
|
|
recordType := args[1]
|
|
value := args[2]
|
|
|
|
ctx, cancel := context.WithTimeout(context.Background(), 30*time.Second)
|
|
defer cancel()
|
|
|
|
changed, err := dns.EnsureRecord(ctx, dnsZone, host, recordType, value, dnsTTL)
|
|
if err != nil {
|
|
return fmt.Errorf("set record: %w", err)
|
|
}
|
|
|
|
if changed {
|
|
cli.Print("%s %s %s %s -> %s\n",
|
|
cli.SuccessStyle.Render("✓"),
|
|
recordType, host, dnsZone, value)
|
|
} else {
|
|
cli.Print("%s Record already correct\n", cli.DimStyle.Render("·"))
|
|
}
|
|
|
|
return nil
|
|
}
|