ops: simplify justfile, guard deploy-db, extract scripts, fix .gitignore

scripts/deploy-server.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+# Deploy production nginx configuration for Post-ERG (NEW STRUCTURE)
+# This script applies the nginx config for /var/www/posterg/public/ structure
+
+set -e
+
+echo "🚀 Post-ERG Production Deployment (NEW STRUCTURE)"
+echo "=================================================="
+echo ""
+
+# Colors
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m'
+
+# Check if running as root
+if [ "$EUID" -ne 0 ]; then 
+    echo -e "${RED}Error: This script must be run as root (use sudo)${NC}"
+    exit 1
+fi
+
+echo "📋 Step 1: Fixing file permissions..."
+echo "--------------------------------------"
+
+# Change ownership to www-data:posterg
+chown -R www-data:posterg /var/www/posterg/
+echo "✓ Changed ownership to www-data:posterg"
+
+# Set directory permissions (755)
+find /var/www/posterg -type d -exec chmod 755 {} \;
+echo "✓ Set directory permissions to 755"
+
+# Set file permissions (644)
+find /var/www/posterg -type f -exec chmod 644 {} \;
+echo "✓ Set file permissions to 644"
+
+# Make storage directory writable by group
+if [ -d "/var/www/posterg/storage" ]; then
+    chmod 775 /var/www/posterg/storage
+    echo "✓ Made storage directory group-writable (775)"
+fi
+
+# Fix database file permissions
+if [ -f "/var/www/posterg/storage/test.db" ]; then
+    chmod 660 /var/www/posterg/storage/test.db
+    chown www-data:posterg /var/www/posterg/storage/test.db
+    echo "✓ Fixed database file permissions (660)"
+fi
+
+# Make admin upload directories writable by group
+if [ -d "/var/www/posterg/public/admin/data" ]; then
+    find /var/www/posterg/public/admin/data -type d -exec chmod 775 {} \;
+    echo "✓ Made admin upload directories group-writable"
+fi
+
+echo ""
+echo "📋 Step 2: Deploying nginx configuration..."
+echo "--------------------------------------"
+
+# Backup existing config
+if [ -f "/etc/nginx/sites-available/posterg" ]; then
+    cp /etc/nginx/sites-available/posterg /etc/nginx/sites-available/posterg.backup.$(date +%Y%m%d_%H%M%S)
+    echo "✓ Backed up existing config"
+fi
+
+# Copy new config
+if [ -f "/tmp/posterg.conf" ]; then
+    cp /tmp/posterg.conf /etc/nginx/sites-available/posterg
+    echo "✓ Installed new nginx config"
+else
+    echo -e "${RED}Error: /tmp/posterg.conf not found${NC}"
+    echo "Run 'just deploy-nginx' first"
+    exit 1
+fi
+
+# Test nginx configuration
+echo ""
+echo "📋 Step 3: Testing nginx configuration..."
+echo "--------------------------------------"
+
+if nginx -t; then
+    echo -e "${GREEN}✓ Nginx configuration is valid${NC}"
+else
+    echo -e "${RED}✗ Nginx configuration has errors!${NC}"
+    echo "Restoring backup..."
+    cp /etc/nginx/sites-available/posterg.backup.$(date +%Y%m%d_%H%M%S | tail -1) /etc/nginx/sites-available/posterg
+    exit 1
+fi
+
+echo ""
+echo "📋 Step 4: Summary..."
+echo "--------------------------------------"
+echo -e "${GREEN}✓ Permissions fixed${NC}"
+echo -e "${GREEN}✓ Nginx config installed${NC}"
+echo -e "${GREEN}✓ Configuration validated${NC}"
+echo ""
+echo -e "${YELLOW}Ready to reload nginx!${NC}"
+echo ""
+echo "Run: ${GREEN}sudo systemctl reload nginx${NC}"
+echo ""
+echo "After reload, verify:"
+echo "  • https://posterg.erg.be/"
+echo "  • https://posterg.erg.be/admin/"
+echo "  • https://posterg.erg.be/storage/test.db (should 404)"