182 lines
No EOL
6.9 KiB
Python
182 lines
No EOL
6.9 KiB
Python
import os, subprocess, threading, requests
|
|
# Nettoyer les variables de certificats SSL corrompues ou obsolètes pour éviter les crashs TLS
|
|
os.environ.pop("REQUESTS_CA_BUNDLE", None)
|
|
os.environ.pop("SSL_CERT_FILE", None)
|
|
|
|
from flask import Flask, request, abort
|
|
from datetime import datetime, timezone
|
|
import hashlib
|
|
import hmac
|
|
|
|
app = Flask(__name__)
|
|
|
|
# --- CONFIGURATION ---
|
|
PROJECT_PATH = "/home/discord/Bot/Kuby"
|
|
WEBHOOK_SECRET = "Nois2"
|
|
PROCESS_NAME = "kuby"
|
|
DISCORD_LOG_URL = "https://discord.com/api/webhooks/1482148910888652910/IA9CcOWtjGswbuxMaOu_6uaclv5zojZo4ttxtV6RYyZzJ9gW7BF7xp_Zv3oPIjYEuh8o"
|
|
|
|
# Chemin absolu vers le binaire PM2 (évite l'erreur 127 command not found)
|
|
PM2_BINARY = "/home/discord/.nvm/versions/node/v24.15.0/bin/pm2"
|
|
|
|
# Bot Local Proxy
|
|
BOT_LOCAL_URL = "http://127.0.0.1:5001/bot_event"
|
|
|
|
|
|
def relay_payload_to_bot(payload):
|
|
try:
|
|
requests.post(BOT_LOCAL_URL, json=payload, timeout=5)
|
|
except Exception as e:
|
|
print(f"[!] Erreur de relais vers le bot Discord : {e}")
|
|
|
|
|
|
def verify_signature(payload_brut, received_signature):
|
|
if not received_signature:
|
|
return False
|
|
expected_signature = "sha256=" + hmac.new(
|
|
WEBHOOK_SECRET.encode("utf-8"),
|
|
payload_brut,
|
|
hashlib.sha256
|
|
).hexdigest()
|
|
return hmac.compare_digest(expected_signature, received_signature)
|
|
|
|
|
|
def send_discord_log(status, message, color, author=None, commit_msg=None):
|
|
embed = {
|
|
"title": f"🚀 Kuby V2 : {status}",
|
|
"description": message,
|
|
"color": color,
|
|
"timestamp": datetime.now(timezone.utc).isoformat(),
|
|
"fields": []
|
|
}
|
|
|
|
if author:
|
|
embed["fields"].append({"name": "👤 Auteur", "value": author, "inline": True})
|
|
if commit_msg:
|
|
embed["fields"].append({"name": "📝 Commit", "value": commit_msg, "inline": True})
|
|
|
|
payload = {"embeds": [embed]}
|
|
try:
|
|
requests.post(DISCORD_LOG_URL, json=payload, timeout=10) # ✅ Augmenté de 5s à 10s
|
|
except Exception as e:
|
|
print(f"[!] Erreur envoi Discord : {e}")
|
|
|
|
def run_mep_logic(author, commit_msg, branch="main"):
|
|
start_time = datetime.now()
|
|
send_discord_log("EN COURS", f"Déploiement branch **{branch}** lancé sur la machine de guerre...", 3447003, author, commit_msg)
|
|
|
|
try:
|
|
target_path = PROJECT_PATH
|
|
use_rsync = False
|
|
if not os.path.exists(os.path.join(target_path, ".git")):
|
|
alt_path = "/home/discord/Bot/Kuby"
|
|
if os.path.exists(os.path.join(alt_path, ".git")):
|
|
print(f"[!] {target_path} n'est pas un dépôt Git. Utilisation du dépôt {alt_path} et rsync.")
|
|
target_path = alt_path
|
|
use_rsync = True
|
|
else:
|
|
raise RuntimeError(f"Aucun dépôt Git trouvé dans {target_path} ou {alt_path}")
|
|
|
|
os.chdir(target_path)
|
|
|
|
# 1. GIT
|
|
subprocess.run(["git", "fetch", "origin"], check=True)
|
|
subprocess.run(["git", "reset", "--hard", f"origin/{branch}"], check=True)
|
|
|
|
# 2. RSYNC (si on utilise le fallback de dépôt)
|
|
if use_rsync:
|
|
subprocess.run(["rsync", "-a", "--exclude=.git", "--exclude=venv", "--exclude=.venv", "--exclude=__pycache__", f"{target_path}/", f"{PROJECT_PATH}/"], check=True)
|
|
|
|
# ⚡ Migration automatique GitLab tracking
|
|
send_discord_log("MIGRATION", "Migration GitLab tracking en cours...", 16776960, author, commit_msg)
|
|
try:
|
|
subprocess.run(
|
|
["python3", os.path.join(target_path, "scripts", "migrate_gitlab_tracking.py")],
|
|
cwd=target_path,
|
|
check=True,
|
|
capture_output=True,
|
|
text=True
|
|
)
|
|
send_discord_log("MIGRATION", "✅ Migration GitLab tracking terminée.", 3066993, author, commit_msg)
|
|
except subprocess.CalledProcessError as e:
|
|
send_discord_log("ERREUR MIGRATION", f"❌ Migration GitLab échouée: {e.stderr}", 15158332, author, commit_msg)
|
|
|
|
# 3. PM2 (Appelé directement via son chemin absolu pour corriger l'erreur 127)
|
|
subprocess.run(
|
|
[PM2_BINARY, "restart", PROCESS_NAME],
|
|
check=True,
|
|
capture_output=True,
|
|
text=True
|
|
)
|
|
|
|
duration = (datetime.now() - start_time).total_seconds()
|
|
msg = f"✅ **Déploiement réussi en {duration:.2f}s**\nLe bot est à jour et redémarré."
|
|
send_discord_log("VALIDÉ", msg, 3066993, author, commit_msg)
|
|
|
|
except subprocess.CalledProcessError as e:
|
|
# Capture spécifique si une commande système (comme Git ou PM2) crash
|
|
error_stderr = e.stderr if e.stderr else "Pas de log d'erreur disponible (stderr vide)."
|
|
error_msg = f"❌ **ERREUR de commande (Status {e.returncode})**\nCommande : `{ ' '.join(e.cmd) }`\n\n**Détails :**\n```\n{error_stderr}\n```"
|
|
send_discord_log("ÉCHEC", error_msg, 15158332, author, commit_msg)
|
|
except Exception as e:
|
|
# Capture globale pour le reste du script Python
|
|
error_msg = f"❌ **ERREUR de déploiement**\n```python\n{str(e)}\n```"
|
|
send_discord_log("ÉCHEC", error_msg, 15158332, author, commit_msg)
|
|
|
|
@app.route('/deploy', methods=['POST'])
|
|
def deploy():
|
|
# Sécurité
|
|
if request.headers.get('X-Gitlab-Token') != WEBHOOK_SECRET:
|
|
abort(403)
|
|
|
|
# Extraction des infos GitLab
|
|
data = request.json
|
|
author = "Inconnu"
|
|
commit_msg = "Pas de message"
|
|
|
|
if data and 'commits' in data and len(data['commits']) > 0:
|
|
author = data['commits'][0].get('author', {}).get('name', 'Inconnu')
|
|
commit_msg = data['commits'][0].get('message', 'Pas de message')
|
|
|
|
# Extraction de la branche
|
|
ref = data.get('ref', 'refs/heads/main')
|
|
branch = ref.split('/')[-1] if ref else 'main'
|
|
|
|
# Threading pour répondre vite à GitLab
|
|
threading.Thread(target=run_mep_logic, args=(author, commit_msg, branch)).start()
|
|
|
|
return {"status": "accepted"}, 202
|
|
|
|
@app.route('/gitlab_webhook', methods=['POST'])
|
|
def gitlab_webhook():
|
|
received_token = request.headers.get('X-Gitlab-Token')
|
|
print(f"[DEBUG] Webhook GitLab reçu. Token reçu: '{received_token}'")
|
|
|
|
if received_token != WEBHOOK_SECRET:
|
|
abort(403)
|
|
|
|
payload = request.json
|
|
relay_payload_to_bot(payload)
|
|
return {"status": "received"}, 200
|
|
|
|
|
|
@app.route('/forgejo_webhook', methods=['POST'])
|
|
def forgejo_webhook():
|
|
payload_brut = request.get_data()
|
|
received_signature = (
|
|
request.headers.get('X-Hub-Signature-256')
|
|
or request.headers.get('X-Gitea-Signature')
|
|
or request.headers.get('X-Gogs-Signature')
|
|
)
|
|
|
|
if received_signature and not verify_signature(payload_brut, received_signature):
|
|
print("[!] Signature Forgejo invalide", flush=True)
|
|
abort(403)
|
|
|
|
payload = request.json
|
|
relay_payload_to_bot(payload)
|
|
return {"status": "received"}, 200
|
|
|
|
if __name__ == '__main__':
|
|
print(f"[*] Webhook opérationnel. En attente de push ou d'events...")
|
|
app.run(host='0.0.0.0', port=5000) |