095fd89ff7
Some checks failed
CI/CD Pipeline / Test Suite (push) Has been cancelled
CI/CD Pipeline / Security Audit (push) Has been cancelled
CI/CD Pipeline / Build Docker Image (push) Has been cancelled
CI/CD Pipeline / Deploy to Staging (push) Has been cancelled
CI/CD Pipeline / Deploy to Production (push) Has been cancelled
CI/CD Pipeline / Performance Benchmarks (push) Has been cancelled
CI/CD Pipeline / Cleanup (push) Has been cancelled
486 lines
15 KiB
Bash
Executable File
486 lines
15 KiB
Bash
Executable File
#!/bin/bash
|
|
# Configuration Setup Script
|
|
# This script helps initialize the configuration system for your Rust application
|
|
|
|
set -e
|
|
|
|
# Colors for output
|
|
RED='\033[0;31m'
|
|
GREEN='\033[0;32m'
|
|
YELLOW='\033[1;33m'
|
|
BLUE='\033[0;34m'
|
|
NC='\033[0m' # No Color
|
|
|
|
# Function to print colored output
|
|
print_status() {
|
|
echo -e "${GREEN}[INFO]${NC} $1"
|
|
}
|
|
|
|
print_warning() {
|
|
echo -e "${YELLOW}[WARN]${NC} $1"
|
|
}
|
|
|
|
print_error() {
|
|
echo -e "${RED}[ERROR]${NC} $1"
|
|
}
|
|
|
|
print_header() {
|
|
echo -e "${BLUE}$1${NC}"
|
|
}
|
|
|
|
# Function to check if a command exists
|
|
command_exists() {
|
|
command -v "$1" >/dev/null 2>&1
|
|
}
|
|
|
|
# Function to prompt for user input
|
|
prompt_user() {
|
|
local prompt="$1"
|
|
local default="$2"
|
|
local result
|
|
|
|
if [ -n "$default" ]; then
|
|
echo -n "$prompt [$default]: "
|
|
else
|
|
echo -n "$prompt: "
|
|
fi
|
|
|
|
read -r result
|
|
|
|
if [ -z "$result" ] && [ -n "$default" ]; then
|
|
result="$default"
|
|
fi
|
|
|
|
echo "$result"
|
|
}
|
|
|
|
# Function to generate a random secret
|
|
generate_secret() {
|
|
openssl rand -base64 32 2>/dev/null || echo "change-this-to-a-secure-random-string-$(date +%s)"
|
|
}
|
|
|
|
# Main setup function
|
|
setup_config() {
|
|
print_header "=== Rust Application Configuration Setup ==="
|
|
echo
|
|
|
|
# Check dependencies
|
|
print_status "Checking dependencies..."
|
|
|
|
if ! command_exists "cargo"; then
|
|
print_error "Cargo is required but not installed. Please install Rust first."
|
|
exit 1
|
|
fi
|
|
|
|
# Determine environment
|
|
print_status "Configuring environment..."
|
|
|
|
ENVIRONMENT=$(prompt_user "Enter environment (dev/prod)" "dev")
|
|
|
|
case "$ENVIRONMENT" in
|
|
"dev"|"development")
|
|
ENVIRONMENT="dev"
|
|
CONFIG_FILE="config.dev.toml"
|
|
;;
|
|
"prod"|"production")
|
|
ENVIRONMENT="prod"
|
|
CONFIG_FILE="config.prod.toml"
|
|
;;
|
|
*)
|
|
print_warning "Unknown environment '$ENVIRONMENT', using 'dev'"
|
|
ENVIRONMENT="dev"
|
|
CONFIG_FILE="config.dev.toml"
|
|
;;
|
|
esac
|
|
|
|
print_status "Environment: $ENVIRONMENT"
|
|
print_status "Config file: $CONFIG_FILE"
|
|
|
|
# Check if config file already exists
|
|
if [ -f "$CONFIG_FILE" ]; then
|
|
print_warning "Configuration file $CONFIG_FILE already exists."
|
|
OVERWRITE=$(prompt_user "Overwrite existing file? (y/N)" "n")
|
|
if [[ ! "$OVERWRITE" =~ ^[Yy]$ ]]; then
|
|
print_status "Keeping existing configuration file."
|
|
CONFIG_EXISTS=true
|
|
else
|
|
CONFIG_EXISTS=false
|
|
fi
|
|
else
|
|
CONFIG_EXISTS=false
|
|
fi
|
|
|
|
# Create configuration file if it doesn't exist or should be overwritten
|
|
if [ "$CONFIG_EXISTS" != true ]; then
|
|
print_status "Creating configuration file..."
|
|
|
|
# Get configuration values from user
|
|
APP_NAME=$(prompt_user "Application name" "My Rust App")
|
|
APP_VERSION=$(prompt_user "Application version" "0.1.0")
|
|
|
|
if [ "$ENVIRONMENT" = "dev" ]; then
|
|
SERVER_HOST=$(prompt_user "Server host" "127.0.0.1")
|
|
SERVER_PORT=$(prompt_user "Server port" "3030")
|
|
SERVER_PROTOCOL=$(prompt_user "Server protocol (http/https)" "http")
|
|
LOG_LEVEL=$(prompt_user "Log level (debug/info/warn/error)" "debug")
|
|
DATABASE_URL=$(prompt_user "Database URL" "postgresql://dev:dev@localhost:5432/${APP_NAME,,}_dev")
|
|
else
|
|
SERVER_HOST=$(prompt_user "Server host" "0.0.0.0")
|
|
SERVER_PORT=$(prompt_user "Server port" "443")
|
|
SERVER_PROTOCOL=$(prompt_user "Server protocol (http/https)" "https")
|
|
LOG_LEVEL=$(prompt_user "Log level (debug/info/warn/error)" "info")
|
|
DATABASE_URL=$(prompt_user "Database URL" "postgresql://prod:\${DATABASE_PASSWORD}@db.example.com:5432/${APP_NAME,,}_prod")
|
|
fi
|
|
|
|
# Create the configuration file
|
|
cat > "$CONFIG_FILE" << EOF
|
|
# ${APP_NAME} Configuration - ${ENVIRONMENT^} Environment
|
|
[server]
|
|
protocol = "${SERVER_PROTOCOL}"
|
|
host = "${SERVER_HOST}"
|
|
port = ${SERVER_PORT}
|
|
environment = "${ENVIRONMENT}"
|
|
log_level = "${LOG_LEVEL}"
|
|
|
|
EOF
|
|
|
|
# Add TLS configuration if HTTPS
|
|
if [ "$SERVER_PROTOCOL" = "https" ]; then
|
|
if [ "$ENVIRONMENT" = "dev" ]; then
|
|
TLS_CERT_PATH=$(prompt_user "TLS certificate path" "certs/server.crt")
|
|
TLS_KEY_PATH=$(prompt_user "TLS private key path" "certs/server.key")
|
|
else
|
|
TLS_CERT_PATH=$(prompt_user "TLS certificate path" "/etc/ssl/certs/server.crt")
|
|
TLS_KEY_PATH=$(prompt_user "TLS private key path" "/etc/ssl/private/server.key")
|
|
fi
|
|
|
|
cat >> "$CONFIG_FILE" << EOF
|
|
# TLS Configuration
|
|
[server.tls]
|
|
cert_path = "${TLS_CERT_PATH}"
|
|
key_path = "${TLS_KEY_PATH}"
|
|
|
|
EOF
|
|
fi
|
|
|
|
# Add database configuration
|
|
cat >> "$CONFIG_FILE" << EOF
|
|
# Database Configuration
|
|
[database]
|
|
url = "${DATABASE_URL}"
|
|
max_connections = $([ "$ENVIRONMENT" = "dev" ] && echo "5" || echo "20")
|
|
min_connections = 1
|
|
connect_timeout = 30
|
|
idle_timeout = 600
|
|
max_lifetime = 1800
|
|
|
|
EOF
|
|
|
|
# Add session configuration
|
|
cat >> "$CONFIG_FILE" << EOF
|
|
# Session Configuration
|
|
[session]
|
|
secret = $([ "$ENVIRONMENT" = "dev" ] && echo "\"dev-secret-not-for-production\"" || echo "\"\${SESSION_SECRET}\"")
|
|
cookie_name = "session_id"
|
|
cookie_secure = $([ "$SERVER_PROTOCOL" = "https" ] && echo "true" || echo "false")
|
|
cookie_http_only = true
|
|
cookie_same_site = $([ "$ENVIRONMENT" = "dev" ] && echo "\"lax\"" || echo "\"strict\"")
|
|
max_age = $([ "$ENVIRONMENT" = "dev" ] && echo "7200" || echo "3600")
|
|
|
|
EOF
|
|
|
|
# Add remaining configuration sections
|
|
cat >> "$CONFIG_FILE" << EOF
|
|
# CORS Configuration
|
|
[cors]
|
|
allowed_origins = [$([ "$ENVIRONMENT" = "dev" ] && echo "\"http://localhost:3030\", \"http://127.0.0.1:3030\"" || echo "\"https://yourdomain.com\"")]
|
|
allowed_methods = ["GET", "POST", "PUT", "DELETE", "OPTIONS"]
|
|
allowed_headers = ["Content-Type", "Authorization", "X-Requested-With"]
|
|
allow_credentials = true
|
|
max_age = 3600
|
|
|
|
# Static Files Configuration
|
|
[static]
|
|
assets_dir = "public"
|
|
site_root = "target/site"
|
|
site_pkg_dir = "pkg"
|
|
|
|
# Server Directories Configuration
|
|
[server_dirs]
|
|
public_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"public\"" || echo "\"/var/www/public\"")
|
|
uploads_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"uploads\"" || echo "\"/var/www/uploads\"")
|
|
logs_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"logs\"" || echo "\"/var/log/app\"")
|
|
temp_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"tmp\"" || echo "\"/tmp/app\"")
|
|
cache_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"cache\"" || echo "\"/var/cache/app\"")
|
|
config_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"config\"" || echo "\"/etc/app\"")
|
|
data_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"data\"" || echo "\"/var/lib/app\"")
|
|
backup_dir = $([ "$ENVIRONMENT" = "dev" ] && echo "\"backups\"" || echo "\"/var/backups/app\"")
|
|
|
|
# Security Configuration
|
|
[security]
|
|
enable_csrf = $([ "$ENVIRONMENT" = "dev" ] && echo "false" || echo "true")
|
|
csrf_token_name = "csrf_token"
|
|
rate_limit_requests = $([ "$ENVIRONMENT" = "dev" ] && echo "1000" || echo "50")
|
|
rate_limit_window = 60
|
|
bcrypt_cost = $([ "$ENVIRONMENT" = "dev" ] && echo "4" || echo "12")
|
|
|
|
# OAuth Configuration
|
|
[oauth]
|
|
enabled = false
|
|
|
|
[oauth.google]
|
|
client_id = "\${GOOGLE_CLIENT_ID}"
|
|
client_secret = "\${GOOGLE_CLIENT_SECRET}"
|
|
redirect_uri = "${SERVER_PROTOCOL}://${SERVER_HOST}:${SERVER_PORT}/auth/google/callback"
|
|
|
|
[oauth.github]
|
|
client_id = "\${GITHUB_CLIENT_ID}"
|
|
client_secret = "\${GITHUB_CLIENT_SECRET}"
|
|
redirect_uri = "${SERVER_PROTOCOL}://${SERVER_HOST}:${SERVER_PORT}/auth/github/callback"
|
|
|
|
# Email Configuration
|
|
[email]
|
|
enabled = false
|
|
smtp_host = "smtp.gmail.com"
|
|
smtp_port = 587
|
|
smtp_username = "\${SMTP_USERNAME}"
|
|
smtp_password = "\${SMTP_PASSWORD}"
|
|
from_email = "noreply@example.com"
|
|
from_name = "${APP_NAME}"
|
|
|
|
# Redis Configuration
|
|
[redis]
|
|
enabled = false
|
|
url = "redis://localhost:6379"
|
|
pool_size = 10
|
|
connection_timeout = 5
|
|
command_timeout = 5
|
|
|
|
# Application Settings
|
|
[app]
|
|
name = "${APP_NAME}"
|
|
version = "${APP_VERSION}"
|
|
debug = $([ "$ENVIRONMENT" = "dev" ] && echo "true" || echo "false")
|
|
enable_metrics = $([ "$ENVIRONMENT" = "dev" ] && echo "true" || echo "true")
|
|
enable_health_check = true
|
|
enable_compression = $([ "$ENVIRONMENT" = "dev" ] && echo "false" || echo "true")
|
|
max_request_size = $([ "$ENVIRONMENT" = "dev" ] && echo "52428800" || echo "5242880")
|
|
|
|
# Logging Configuration
|
|
[logging]
|
|
format = $([ "$ENVIRONMENT" = "dev" ] && echo "\"text\"" || echo "\"json\"")
|
|
level = "${LOG_LEVEL}"
|
|
file_path = "logs/app.log"
|
|
max_file_size = 10485760
|
|
max_files = 5
|
|
enable_console = true
|
|
enable_file = $([ "$ENVIRONMENT" = "dev" ] && echo "true" || echo "true")
|
|
|
|
# Content Management
|
|
[content]
|
|
enabled = false
|
|
content_dir = "content"
|
|
cache_enabled = $([ "$ENVIRONMENT" = "dev" ] && echo "false" || echo "true")
|
|
cache_ttl = 3600
|
|
max_file_size = 5242880
|
|
|
|
# Feature Flags
|
|
[features]
|
|
auth = true
|
|
tls = $([ "$SERVER_PROTOCOL" = "https" ] && echo "true" || echo "false")
|
|
content_db = true
|
|
two_factor_auth = false
|
|
EOF
|
|
|
|
print_status "Configuration file created: $CONFIG_FILE"
|
|
fi
|
|
|
|
# Create .env file
|
|
ENV_FILE=".env"
|
|
if [ "$ENVIRONMENT" = "dev" ]; then
|
|
ENV_FILE=".env.development"
|
|
elif [ "$ENVIRONMENT" = "prod" ]; then
|
|
ENV_FILE=".env.production"
|
|
fi
|
|
|
|
if [ -f "$ENV_FILE" ]; then
|
|
print_warning "Environment file $ENV_FILE already exists."
|
|
OVERWRITE_ENV=$(prompt_user "Overwrite existing environment file? (y/N)" "n")
|
|
if [[ ! "$OVERWRITE_ENV" =~ ^[Yy]$ ]]; then
|
|
print_status "Keeping existing environment file."
|
|
ENV_EXISTS=true
|
|
else
|
|
ENV_EXISTS=false
|
|
fi
|
|
else
|
|
ENV_EXISTS=false
|
|
fi
|
|
|
|
if [ "$ENV_EXISTS" != true ]; then
|
|
print_status "Creating environment file..."
|
|
|
|
cat > "$ENV_FILE" << EOF
|
|
# Environment Configuration for ${ENVIRONMENT^}
|
|
ENVIRONMENT=${ENVIRONMENT}
|
|
|
|
# Database Configuration
|
|
EOF
|
|
|
|
if [ "$ENVIRONMENT" = "dev" ]; then
|
|
cat >> "$ENV_FILE" << EOF
|
|
DATABASE_URL=postgresql://dev:dev@localhost:5432/myapp_dev
|
|
|
|
# Session Configuration
|
|
SESSION_SECRET=dev-secret-not-for-production
|
|
EOF
|
|
else
|
|
cat >> "$ENV_FILE" << EOF
|
|
DATABASE_PASSWORD=your-production-database-password
|
|
|
|
# Session Configuration
|
|
SESSION_SECRET=$(generate_secret)
|
|
EOF
|
|
fi
|
|
|
|
cat >> "$ENV_FILE" << EOF
|
|
|
|
# OAuth Configuration (optional)
|
|
# GOOGLE_CLIENT_ID=your-google-client-id
|
|
# GOOGLE_CLIENT_SECRET=your-google-client-secret
|
|
# GITHUB_CLIENT_ID=your-github-client-id
|
|
# GITHUB_CLIENT_SECRET=your-github-client-secret
|
|
|
|
# Email Configuration (optional)
|
|
# SMTP_USERNAME=your-smtp-username
|
|
# SMTP_PASSWORD=your-smtp-password
|
|
|
|
# Server Overrides (optional)
|
|
# SERVER_HOST=0.0.0.0
|
|
# SERVER_PORT=8080
|
|
# LOG_LEVEL=debug
|
|
EOF
|
|
|
|
print_status "Environment file created: $ENV_FILE"
|
|
fi
|
|
|
|
# Create directories
|
|
print_status "Creating directories..."
|
|
|
|
# Create basic directories
|
|
mkdir -p logs
|
|
mkdir -p content/public
|
|
|
|
# Create server directories based on environment
|
|
if [ "$ENVIRONMENT" = "dev" ]; then
|
|
mkdir -p public uploads tmp cache config data backups
|
|
print_status "Created development directories: public, uploads, logs, tmp, cache, config, data, backups"
|
|
else
|
|
print_status "Production directories should be created by system administrator with proper permissions"
|
|
print_warning "Required directories: /var/www/public, /var/www/uploads, /var/log/app, /tmp/app, /var/cache/app, /etc/app, /var/lib/app, /var/backups/app"
|
|
fi
|
|
|
|
if [ "$SERVER_PROTOCOL" = "https" ]; then
|
|
mkdir -p certs
|
|
print_warning "HTTPS is enabled. You'll need to provide TLS certificates in the certs/ directory."
|
|
fi
|
|
|
|
# Create a default config.toml symlink if it doesn't exist
|
|
if [ ! -f "config.toml" ]; then
|
|
ln -sf "$CONFIG_FILE" config.toml
|
|
print_status "Created config.toml symlink to $CONFIG_FILE"
|
|
fi
|
|
|
|
# Validate configuration
|
|
print_status "Validating configuration..."
|
|
|
|
if command_exists "cargo"; then
|
|
if cargo run --bin config_tool -- validate 2>/dev/null; then
|
|
print_status "Configuration validation passed!"
|
|
else
|
|
print_warning "Configuration validation failed. Please check your settings."
|
|
fi
|
|
else
|
|
print_warning "Could not validate configuration (cargo not found)."
|
|
fi
|
|
|
|
# Display next steps
|
|
print_header "=== Setup Complete ==="
|
|
echo
|
|
print_status "Configuration has been set up successfully!"
|
|
echo
|
|
print_status "Next steps:"
|
|
echo "1. Review and customize your configuration file: $CONFIG_FILE"
|
|
echo "2. Set up your environment variables: $ENV_FILE"
|
|
echo "3. If using HTTPS, place your TLS certificates in the certs/ directory"
|
|
echo "4. Set up your database and update the connection string"
|
|
echo "5. Configure OAuth providers if needed"
|
|
echo "6. Run 'cargo run --bin config_tool -- show' to view your configuration"
|
|
echo "7. Start your application with 'cargo run'"
|
|
echo
|
|
|
|
if [ "$ENVIRONMENT" = "prod" ]; then
|
|
print_warning "Production environment detected!"
|
|
echo "- Make sure to set secure values for SESSION_SECRET and DATABASE_PASSWORD"
|
|
echo "- Review all security settings in your configuration"
|
|
echo "- Use proper secrets management in production"
|
|
echo "- Enable HTTPS with valid TLS certificates"
|
|
fi
|
|
|
|
print_status "For more information, see CONFIG_README.md"
|
|
}
|
|
|
|
# Function to show usage
|
|
show_usage() {
|
|
echo "Usage: $0 [OPTIONS]"
|
|
echo
|
|
echo "Options:"
|
|
echo " -h, --help Show this help message"
|
|
echo " -e, --env ENV Set environment (dev/prod)"
|
|
echo " -f, --force Overwrite existing files without prompting"
|
|
echo
|
|
echo "Examples:"
|
|
echo " $0 # Interactive setup"
|
|
echo " $0 -e dev # Setup for development"
|
|
echo " $0 -e prod # Setup for production"
|
|
echo " $0 -f # Force overwrite existing files"
|
|
}
|
|
|
|
# Parse command line arguments
|
|
FORCE=false
|
|
ENV_ARG=""
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case $1 in
|
|
-h|--help)
|
|
show_usage
|
|
exit 0
|
|
;;
|
|
-e|--env)
|
|
ENV_ARG="$2"
|
|
shift 2
|
|
;;
|
|
-f|--force)
|
|
FORCE=true
|
|
shift
|
|
;;
|
|
*)
|
|
print_error "Unknown option: $1"
|
|
show_usage
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
# Set environment if provided
|
|
if [ -n "$ENV_ARG" ]; then
|
|
ENVIRONMENT="$ENV_ARG"
|
|
fi
|
|
|
|
# Set force mode
|
|
if [ "$FORCE" = true ]; then
|
|
export FORCE_OVERWRITE=true
|
|
fi
|
|
|
|
# Run setup
|
|
setup_config
|