fb2d90b947
- backend: skip Expo alert push to iOS devices that already received VoIP push (CallKit + banner = double ring) - native: receiveIncoming no longer triggers InCallManager.startRingtone — CallKit/ConnectionService play their own ring. Dedup if same callId arrives twice (Realtime + VoIP-Push race).
94 lines
5.5 KiB
Bash
Executable File
94 lines
5.5 KiB
Bash
Executable File
#!/bin/bash
|
|
# rebreak-backend Staging — startet Nitro mit Infisical-Secrets.
|
|
#
|
|
# Pattern: infisical login → infisical run --env=staging spritzt secrets als
|
|
# process.env.X. Innerhalb des wrappers mappen wir Infisical's Namen auf die
|
|
# Namen die unser Code erwartet (SUPABASE_KEY → SUPABASE_ANON_KEY, NUXT_X → X)
|
|
# UND auf NITRO_-Prefix-Names damit Nitro's runtimeConfig zur Laufzeit overrides.
|
|
|
|
set -euo pipefail
|
|
source /etc/environment
|
|
|
|
if [[ -z "${INFISICAL_CLIENT_ID:-}" || -z "${INFISICAL_CLIENT_SECRET:-}" ]]; then
|
|
echo "[start-staging] FEHLER: INFISICAL_CLIENT_ID / SECRET nicht gesetzt" >&2
|
|
exit 1
|
|
fi
|
|
|
|
INFISICAL_TOKEN=$(infisical login \
|
|
--method=universal-auth \
|
|
--client-id="${INFISICAL_CLIENT_ID}" \
|
|
--client-secret="${INFISICAL_CLIENT_SECRET}" \
|
|
--silent --plain 2>/dev/null)
|
|
|
|
[[ -z "$INFISICAL_TOKEN" ]] && { echo "[start-staging] Infisical login fehlgeschlagen" >&2; exit 1; }
|
|
|
|
export NODE_ENV=production
|
|
export NITRO_PORT=3016
|
|
export NITRO_HOST=127.0.0.1
|
|
export PORT=3016
|
|
|
|
NODE_BIN="/root/.nvm/versions/node/v24.11.1/bin/node"
|
|
INDEX_MJS="/srv/rebreak/backend/.output-staging/server/index.mjs"
|
|
|
|
[[ ! -f "$INDEX_MJS" ]] && { echo "[start-staging] FEHLER: $INDEX_MJS fehlt — deploy.sh laufen lassen" >&2; exit 1; }
|
|
|
|
exec infisical run \
|
|
--projectId="${INFISICAL_PROJECT_ID:-14b11b35-ef59-4b8a-a16b-398f0cc3ad93}" \
|
|
--env=staging \
|
|
--token="$INFISICAL_TOKEN" \
|
|
-- bash -c '
|
|
set -e
|
|
# ─── Infisical-Name-Aliasing → Standard-Namen ──────────────────────
|
|
export SUPABASE_ANON_KEY="${SUPABASE_KEY:-${SUPABASE_ANON_KEY:-}}"
|
|
export SUPABASE_SERVICE_ROLE_KEY="${SUPABASE_SERVICE_KEY:-${SUPABASE_SERVICE_ROLE_KEY:-}}"
|
|
export OPENROUTER_API_KEY="${OPENROUTER_API_KEY:-${NUXT_OPENROUTER_API_KEY:-}}"
|
|
export GROQ_API_KEY="${GROQ_API_KEY:-${NUXT_GROQ_API_KEY:-}}"
|
|
export GOOGLE_API_KEY="${GOOGLE_API_KEY:-${NUXT_GOOGLE_API_KEY:-}}"
|
|
export GEMINI_API_KEY="${GEMINI_API_KEY:-}"
|
|
export DEEPGRAM_API_KEY="${DEEPGRAM_API_KEY:-${NUXT_DEEPGRAM_API_KEY:-}}"
|
|
export DATABASE_URL="${DATABASE_URL:-${NUXT_DATABASE_URL:-}}"
|
|
export LYRA_BOT_USER_ID="${LYRA_BOT_USER_ID:-${NUXT_LYRA_BOT_USER_ID:-}}"
|
|
export REBREAK_BOT_USER_ID="${REBREAK_BOT_USER_ID:-${NUXT_REBREAK_BOT_USER_ID:-}}"
|
|
|
|
# ─── NITRO_-Prefix für Runtime-Override des runtimeConfig ──────────
|
|
[[ -n "${SUPABASE_URL:-}" ]] && export NITRO_SUPABASE_URL="$SUPABASE_URL" && export NITRO_PUBLIC_SUPABASE_URL="$SUPABASE_URL"
|
|
[[ -n "${SUPABASE_ANON_KEY:-}" ]] && export NITRO_SUPABASE_ANON_KEY="$SUPABASE_ANON_KEY" && export NITRO_PUBLIC_SUPABASE_KEY="$SUPABASE_ANON_KEY"
|
|
[[ -n "${SUPABASE_SERVICE_ROLE_KEY:-}" ]] && export NITRO_SUPABASE_SERVICE_KEY="$SUPABASE_SERVICE_ROLE_KEY"
|
|
[[ -n "${DATABASE_URL:-}" ]] && export NITRO_DATABASE_URL="$DATABASE_URL"
|
|
[[ -n "${OPENROUTER_API_KEY:-}" ]] && export NITRO_OPENROUTER_API_KEY="$OPENROUTER_API_KEY"
|
|
[[ -n "${OPENAI_API_KEY:-}" ]] && export NITRO_OPENAI_API_KEY="$OPENAI_API_KEY"
|
|
[[ -n "${GROQ_API_KEY:-}" ]] && export NITRO_GROQ_API_KEY="$GROQ_API_KEY"
|
|
[[ -n "${GOOGLE_AI_API_KEY:-}" ]] && export NITRO_GOOGLE_AI_API_KEY="$GOOGLE_AI_API_KEY"
|
|
[[ -n "${GOOGLE_API_KEY:-}" ]] && export NITRO_GOOGLE_API_KEY="$GOOGLE_API_KEY"
|
|
[[ -n "${GEMINI_API_KEY:-}" ]] && export NITRO_GEMINI_API_KEY="$GEMINI_API_KEY"
|
|
[[ -n "${DEEPGRAM_API_KEY:-}" ]] && export NITRO_DEEPGRAM_API_KEY="$DEEPGRAM_API_KEY"
|
|
[[ -n "${CARTESIA_API_KEY:-}" ]] && export NITRO_CARTESIA_API_KEY="$CARTESIA_API_KEY"
|
|
[[ -n "${ELEVENLABS_API_KEY:-}" ]] && export NITRO_ELEVENLABS_API_KEY="$ELEVENLABS_API_KEY"
|
|
[[ -n "${JWT_SECRET:-}" ]] && export NITRO_JWT_SECRET="$JWT_SECRET"
|
|
[[ -n "${ENCRYPTION_KEY:-}" ]] && export NITRO_ENCRYPTION_KEY="$ENCRYPTION_KEY"
|
|
[[ -n "${ADMIN_SECRET:-}" ]] && export NITRO_ADMIN_SECRET="$ADMIN_SECRET"
|
|
[[ -n "${LYRA_BOT_USER_ID:-}" ]] && export NITRO_LYRA_BOT_USER_ID="$LYRA_BOT_USER_ID"
|
|
[[ -n "${REBREAK_BOT_USER_ID:-}" ]] && export NITRO_REBREAK_BOT_USER_ID="$REBREAK_BOT_USER_ID"
|
|
[[ -n "${STRIPE_SECRET_KEY:-}" ]] && export NITRO_STRIPE_SECRET_KEY="$STRIPE_SECRET_KEY"
|
|
[[ -n "${STRIPE_WEBHOOK_SECRET:-}" ]] && export NITRO_STRIPE_WEBHOOK_SECRET="$STRIPE_WEBHOOK_SECRET"
|
|
[[ -n "${STRIPE_PUBLISHABLE_KEY:-}" ]] && export NITRO_PUBLIC_STRIPE_PUBLISHABLE_KEY="$STRIPE_PUBLISHABLE_KEY"
|
|
[[ -n "${BREVO_API_KEY:-}" ]] && export NITRO_BREVO_API_KEY="$BREVO_API_KEY"
|
|
[[ -n "${HOOK_SEND_EMAIL_SECRETS:-}" ]] && export NITRO_HOOK_SEND_EMAIL_SECRETS="$HOOK_SEND_EMAIL_SECRETS"
|
|
[[ -n "${MAIL_SENDER_EMAIL:-}" ]] && export NITRO_MAIL_SENDER_EMAIL="$MAIL_SENDER_EMAIL"
|
|
[[ -n "${ADGUARD_BASE_URL:-}" ]] && export NITRO_ADGUARD_BASE_URL="$ADGUARD_BASE_URL"
|
|
[[ -n "${ADGUARD_USER:-}" ]] && export NITRO_ADGUARD_USER="$ADGUARD_USER"
|
|
[[ -n "${ADGUARD_PASSWORD:-}" ]] && export NITRO_ADGUARD_PASSWORD="$ADGUARD_PASSWORD"
|
|
# Voice-Calls (coturn) — runtimeConfig.turn* override.
|
|
[[ -n "${TURN_HOST:-}" ]] && export NITRO_TURN_HOST="$TURN_HOST"
|
|
[[ -n "${TURN_SECRET:-}" ]] && export NITRO_TURN_SECRET="$TURN_SECRET"
|
|
[[ -n "${TURN_REALM:-}" ]] && export NITRO_TURN_REALM="$TURN_REALM"
|
|
# VoIP-Push (APNs PushKit) — voip-push.ts liest direkt process.env.APNS_VOIP_*.
|
|
# Müssen NICHT auf NITRO_* gemappt werden, aber must be exported so child shell sieht sie.
|
|
export APNS_VOIP_P12_PATH="${APNS_VOIP_P12_PATH:-}"
|
|
export APNS_VOIP_P12_PASSWORD="${APNS_VOIP_P12_PASSWORD:-}"
|
|
export APNS_VOIP_TOPIC="${APNS_VOIP_TOPIC:-}"
|
|
export APNS_VOIP_PRODUCTION="${APNS_VOIP_PRODUCTION:-}"
|
|
|
|
exec '"$NODE_BIN"' '"$INDEX_MJS"'
|
|
'
|