init

setup.sh

@@ -0,0 +1,129 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+repo_root="$(CDPATH= cd -- "$(dirname "$0")" && pwd)"
+template="$repo_root/fly.toml.tmpl"
+config="$repo_root/fly.toml"
+cd "$repo_root"
+
+for command_name in fly openssl sed tr; do
+    if ! command -v "$command_name" >/dev/null 2>&1; then
+        printf 'Required command not found: %s\n' "$command_name" >&2
+        exit 1
+    fi
+done
+
+prompt() {
+    local variable_name=$1
+    local message=$2
+    local default_value=${3:-}
+    local value
+
+    if [ -n "$default_value" ]; then
+        read -r -p "$message [$default_value]: " value
+        value=${value:-$default_value}
+    else
+        while [ -z "${value:-}" ]; do
+            read -r -p "$message: " value
+        done
+    fi
+    printf -v "$variable_name" '%s' "$value"
+}
+
+prompt app_name 'Fly app name'
+case "$app_name" in
+    -*|*-|*[!a-z0-9-]*)
+        printf 'App names may only contain lowercase letters, numbers, and internal hyphens.\n' >&2
+        exit 1
+        ;;
+esac
+
+prompt primary_region 'Fly primary region' 'nrt'
+case "$primary_region" in
+    *[!a-z0-9]*)
+        printf 'Invalid Fly region: %s\n' "$primary_region" >&2
+        exit 1
+        ;;
+esac
+
+prompt admin_username 'Forgejo admin username' 'admin'
+case "$admin_username" in
+    -*|*-|*[!A-Za-z0-9._-]*)
+        printf 'The Forgejo username may only contain letters, numbers, ., _, and internal hyphens.\n' >&2
+        exit 1
+        ;;
+esac
+prompt admin_email 'Forgejo admin email' "admin@$app_name.fly.dev"
+if [[ "$admin_email" != *@* ]]; then
+    printf 'Invalid email address: %s\n' "$admin_email" >&2
+    exit 1
+fi
+
+caddy_username=
+caddy_password=
+read -r -p 'Enable Caddy HTTP basic auth? [y/N]: ' enable_caddy_auth
+case "$enable_caddy_auth" in
+    y|Y|yes|YES)
+        prompt caddy_username 'Caddy basic auth username' "$admin_username"
+        case "$caddy_username" in
+            *[!A-Za-z0-9._@-]*)
+                printf 'The Caddy username may only contain letters, numbers, ., _, @, and -.\n' >&2
+                exit 1
+                ;;
+        esac
+
+        while [ -z "$caddy_password" ]; do
+            read -r -s -p 'Caddy basic auth password: ' caddy_password
+            printf '\n'
+        done
+        read -r -s -p 'Confirm Caddy basic auth password: ' caddy_password_confirmation
+        printf '\n'
+        if [ "$caddy_password" != "$caddy_password_confirmation" ]; then
+            printf 'Caddy passwords do not match.\n' >&2
+            exit 1
+        fi
+        ;;
+    ''|n|N|no|NO)
+        ;;
+    *)
+        printf 'Please answer yes or no.\n' >&2
+        exit 1
+        ;;
+esac
+
+admin_password="$(openssl rand -base64 24 | tr -d '\n')"
+
+sed \
+    -e "s/__APP_NAME__/$app_name/g" \
+    -e "s/__PRIMARY_REGION__/$primary_region/g" \
+    "$template" > "$config"
+
+printf '\nGenerated Forgejo admin credentials:\n'
+printf '  Username: %s\n' "$admin_username"
+printf '  Password: %s\n' "$admin_password"
+
+printf '\nCreating Fly app %s...\n' "$app_name"
+fly apps create "$app_name"
+
+secrets=(
+    "FORGEJO_ADMIN_USERNAME=$admin_username"
+    "FORGEJO_ADMIN_EMAIL=$admin_email"
+    "FORGEJO_ADMIN_PASSWORD=$admin_password"
+)
+if [ -n "$caddy_username" ]; then
+    secrets+=(
+        "CADDY_BASIC_AUTH_USERNAME=$caddy_username"
+        "CADDY_BASIC_AUTH_PASSWORD=$caddy_password"
+    )
+fi
+fly secrets set --stage --app "$app_name" "${secrets[@]}"
+
+printf '\nDeploying Forgejo...\n'
+fly deploy --config "$config"
+
+printf '\nForgejo is available at https://%s.fly.dev/\n' "$app_name"
+printf 'Admin username: %s\n' "$admin_username"
+printf 'Admin password: %s\n' "$admin_password"
+if [ -n "$caddy_username" ]; then
+    printf 'Caddy basic auth username: %s\n' "$caddy_username"
+fi