import os, subprocess, threading, requests from flask import Flask, request, abort from datetime import datetime, timezone app = Flask(__name__) # --- CONFIGURATION --- PROJECT_PATH = "/home/discord/Bot/Kuby_V2" WEBHOOK_SECRET = "Nois2" PROCESS_NAME = "kuby-bot" DISCORD_LOG_URL = "https://discord.com/api/webhooks/1482148910888652910/IA9CcOWtjGswbuxMaOu_6uaclv5zojZo4ttxtV6RYyZzJ9gW7BF7xp_Zv3oPIjYEuh8o" # Bot Local Proxy BOT_LOCAL_URL = "http://127.0.0.1:5001/bot_event" def send_discord_log(status, message, color, author=None, commit_msg=None): embed = { "title": f"🚀 Kuby V2 : {status}", "description": message, "color": color, "timestamp": datetime.now(timezone.utc).isoformat(), "fields": [] } if author: embed["fields"].append({"name": "👤 Auteur", "value": author, "inline": True}) if commit_msg: embed["fields"].append({"name": "📝 Commit", "value": commit_msg, "inline": True}) payload = {"embeds": [embed]} try: requests.post(DISCORD_LOG_URL, json=payload, timeout=5) except Exception as e: print(f"[!] Erreur envoi Discord : {e}") def run_mep_logic(author, commit_msg, branch="main"): start_time = datetime.now() send_discord_log("EN COURS", f"Déploiement branch **{branch}** lancé sur la machine de guerre...", 3447003, author, commit_msg) try: os.chdir(PROJECT_PATH) # 1. GIT subprocess.run(["git", "fetch", "origin"], check=True) subprocess.run(["git", "reset", "--hard", f"origin/{branch}"], check=True) duration = (datetime.now() - start_time).total_seconds() msg = f"✅ **Déploiement réussi en {duration:.2f}s**\nLe bot est à jour et redémarré." send_discord_log("VALIDÉ", msg, 3066993, author, commit_msg) # 2. PM2 (Appelé après le message pour éviter que le kill du serv ne bloque l'envoi) subprocess.run(f"pm2 restart {PROCESS_NAME}", shell=True, check=True, capture_output=True) except Exception as e: error_msg = f"❌ **ERREUR de déploiement**\n```python\n{str(e)}\n```" send_discord_log("ÉCHEC", error_msg, 15158332, author, commit_msg) @app.route('/deploy', methods=['POST']) def deploy(): # Sécurité if request.headers.get('X-Gitlab-Token') != WEBHOOK_SECRET: abort(403) # Extraction des infos GitLab data = request.json author = "Inconnu" commit_msg = "Pas de message" if data and 'commits' in data and len(data['commits']) > 0: author = data['commits'][0].get('author', {}).get('name', 'Inconnu') commit_msg = data['commits'][0].get('message', 'Pas de message') # Extraction de la branche ref = data.get('ref', 'refs/heads/main') branch = ref.split('/')[-1] if ref else 'main' # Threading pour répondre vite à GitLab threading.Thread(target=run_mep_logic, args=(author, commit_msg, branch)).start() return {"status": "accepted"}, 202 @app.route('/gitlab_webhook', methods=['POST']) def gitlab_webhook(): # Protection par Token uniquement (anti-crawler géré par le secret) received_token = request.headers.get('X-Gitlab-Token') # Log de debug pour voir ce que GitLab envoie vs ce qu'on attend print(f"[DEBUG] Webhook reçu. Token attendu: '{WEBHOOK_SECRET}', Token reçu: '{received_token}'") if received_token != WEBHOOK_SECRET: abort(403) # Changé en 403 pour différencier une route non trouvée d'un accès refusé # Transférer la payload au bot Discord localement sur le port 5001 payload = request.json try: # Timeout très court car c'est en local requests.post(BOT_LOCAL_URL, json=payload, timeout=2) except requests.exceptions.RequestException as e: print(f"[!] Erreur de relais vers le bot Discord : {e}") # On renvoie 200 à GitLab quand même car GitLab n'a pas à savoir l'état interne return {"status": "received"}, 200 if __name__ == '__main__': print(f"[*] Webhook opérationnel. En attente de push ou d'events...") app.run(host='0.0.0.0', port=5000)