yunohost-gitea_ynh/scripts/upgrade

#!/bin/bash

source _common.sh
source /usr/share/yunohost/helpers

#=================================================
# ENSURE DOWNWARD COMPATIBILITY
#=================================================
ynh_script_progression 'Ensuring downward compatibility...'

if ynh_app_upgrading_from_version_before 1.6.4~ynh1; then
    message="Upgrade from $YNH_APP_CURRENT_VERSION was dropped. You need to run this, then upgrade to the latest version:
sudo yunohost app upgrade $app -u https://github.com/YunoHost-Apps/gitea_ynh/commit/a9ceb157032ae2290e944c1d0a255451ff2d133d"
    ynh_print_info "$message"
    ynh_die "$message" --ret_code=1
fi

#=================================================
# STOP SYSTEMD SERVICE
#=================================================
ynh_script_progression 'Stopping $app's systemd service...'

ynh_systemctl --service="$app" --action=stop

#=================================================
# MIGRATION STEP 1 (migrate path from packagin v1)
#=================================================

# This is not handled by the core because the previous package did not define final_path...
if [ -d "/opt/$app" ]; then
    # This is the package version of the manifestv2
    mv -t "$install_dir/" "/opt/$app/"*
    ynh_safe_rm "/opt/$app"
fi

# Move data directory
if [ -d /home"/$app" ]; then
    mv /home"/$app/" "$data_dir"
fi

# Ensure the user has the correct home dir
if [ ~"$app" != "$data_dir" ]; then
    usermod --home "$data_dir" "$app"
fi

# FIXME: this is still supported but the recommendation is now to *always* re-setup the app sources wether or not the upstream sources changed
if ynh_app_upstream_version_changed; then
    ynh_setup_source --dest_dir="$install_dir" --source_id=main --full_replace --keep=custom
fi

#=================================================
# MIGRATION STEP 2 (Set undefined Vars)
#=================================================

ynh_script_progression 'Migrating missing settings...'

# Must set permission before to call gitea command
#REMOVEME? Assuming the install dir is setup using ynh_setup_source, the proper chmod/chowns are now already applied and it shouldn't be necessary to tweak perms | chown -R "$app:$app" "$install_dir"
#REMOVEME? Assuming the install dir is setup using ynh_setup_source, the proper chmod/chowns are now already applied and it shouldn't be necessary to tweak perms | chmod -R u=rwX,g=rX,o= "$install_dir"
chmod +x "$install_dir/gitea"

# FIXMEhelpers2.1: maybe replace with: ynh_app_setting_set_default --key=internal_token --value="$(ynh_exec_as_app "$install_dir/gitea" generate secret INTERNAL_TOKEN)"
if [[ -z "${internal_token:-}" ]]; then
    internal_token="$(ynh_exec_as_app "$install_dir/gitea" generate secret INTERNAL_TOKEN)"
    ynh_app_setting_set --key=internal_token --value="$internal_token"
fi

# FIXMEhelpers2.1: maybe replace with: ynh_app_setting_set_default --key=secret_key --value="$(ynh_exec_as_app "$install_dir/gitea" generate secret SECRET_KEY)"
if [[ -z "${secret_key:-}" ]]; then
    secret_key="$(ynh_exec_as_app "$install_dir/gitea" generate secret SECRET_KEY)"
    ynh_app_setting_set --key=secret_key --value="$secret_key"
fi

if [[ -n "${lfs_key:-}" ]]; then
    lfs_jwt_secret="$lfs_key"
    ynh_app_setting_delete --key=lfs_key
    ynh_app_setting_set --key=lfs_jwt_secret --value="$lfs_jwt_secret"
fi

# FIXMEhelpers2.1: maybe replace with: ynh_app_setting_set_default --key=lfs_jwt_secret --value="$(ynh_exec_as_app "$install_dir/gitea" generate secret JWT_SECRET)"
if [[ -z "${lfs_jwt_secret:-}" ]]; then
    lfs_jwt_secret="$(ynh_exec_as_app "$install_dir/gitea" generate secret JWT_SECRET)"
    ynh_app_setting_set --key=lfs_jwt_secret --value="$lfs_jwt_secret"
fi

# FIXMEhelpers2.1: maybe replace with: ynh_app_setting_set_default --key=jwt_secret --value="$(ynh_exec_as_app "$install_dir/gitea" generate secret JWT_SECRET)"
if [[ -z "${jwt_secret:-}" ]]; then
    jwt_secret="$(ynh_exec_as_app "$install_dir/gitea" generate secret JWT_SECRET)"
    ynh_app_setting_set --key=jwt_secret --value="$jwt_secret"
fi

#=================================================
# MIGRATION STEP Fix regression linked to 77c3678 and #76
#=================================================

list_param_sql="$(yunohost user list --output-as json | jq -c '.users | keys' | sed 's|\[|\(|' | sed 's|\]|\)|')"
ynh_replace --match=__APP__ --replace="$app" --file=./fix_user_db_for_local_users.sql
ynh_replace --match=__USER_LIST__ --replace="$list_param_sql" --file=./fix_user_db_for_local_users.sql
ynh_mysql_db_shell < ./fix_user_db_for_local_users.sql

#=================================================
# UPDATE A CONFIG FILE
#=================================================
ynh_script_progression 'Updating configuration files...'

# Clean template to fix issue : https://github.com/gogits/gogs/issues/4585
ynh_safe_rm "$install_dir/templates"

# Configure gitea with app.ini file
ynh_config_add --template=app.ini --destination="$install_dir/custom/conf/app.ini"

ynh_script_progression 'Setting permissions...'
_set_permissions

# Update ldap config

# Note that the 'GroupTeamMap' depends of the user need so we can't apply a generic values for all instances
# So to avoid to override the value after each update we retrive and apply the user value
group_team_map_config=$(mysql --user="$db_user" --password="$db_pwd" --batch --raw "$db_name" <<< 'SELECT `cfg` FROM `'$app'`.`login_source` WHERE `id`=1;' \
    | tail -n+2 | jq '.GroupTeamMap')
sed -i 's|__GROUP_TEAM_MAP__|'"${group_team_map_config//\\/\\\\\\\\}"'|g' ./login_source.sql
ynh_replace --match=__APP__ --replace="$app" --file=./login_source.sql
ynh_mysql_db_shell < ./login_source.sql

#=================================================
# REAPPLY SYSTEM CONFIGURATIONS
#=================================================
ynh_script_progression "Upgrading system configurations related to $app..."

ynh_config_add_nginx

ynh_config_add_systemd

yunohost service add "$app" --log="/var/log/$app/gitea.log"

ynh_config_add_logrotate

ynh_config_add_fail2ban --logpath="/var/log/$app/gitea.log" --failregex=".*Failed authentication attempt for .* from <HOST>"

#=================================================
# START SYSTEMD SERVICE
#=================================================
ynh_script_progression 'Starting $app's systemd service...'

ynh_systemctl --service="$app" --action=start --log_path="/var/log/$app/gitea.log" --wait_until="$systemd_match_start_line"

#=================================================
# END OF SCRIPT
#=================================================

ynh_script_progression "Upgrade of $app completed"