Add Eden Smash Ultimate VPS room deployment scripts.
Provides install/update systemd workflow for git-based deploys to Ubuntu VPS. Co-authored-by: Cursor <[email protected]>
This commit is contained in:
Cursor
Executable
+151
@@ -0,0 +1,151 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
ENV_FILE="${REPO_DIR}/.env"
|
||||
ENV_EXAMPLE="${REPO_DIR}/env.example"
|
||||
BINARY_DIR="${REPO_DIR}/bin"
|
||||
BINARY="${BINARY_DIR}/eden-room"
|
||||
SERVICE_NAME="eden-room"
|
||||
SERVICE_FILE="/etc/systemd/system/${SERVICE_NAME}.service"
|
||||
EDEN_USER="eden"
|
||||
EDEN_GROUP="eden"
|
||||
|
||||
BASE_URL="https://git.eden-emu.dev/eden-emu/eden/releases/download"
|
||||
|
||||
require_root() {
|
||||
if [[ "${EUID}" -ne 0 ]]; then
|
||||
echo "Run as root: sudo $0" >&2
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
load_env() {
|
||||
if [[ -f "${ENV_FILE}" ]]; then
|
||||
# shellcheck source=/dev/null
|
||||
source "${ENV_FILE}"
|
||||
elif [[ -f "${ENV_EXAMPLE}" ]]; then
|
||||
# shellcheck source=/dev/null
|
||||
source "${ENV_EXAMPLE}"
|
||||
fi
|
||||
: "${EDEN_RELEASE_VERSION:=v0.2.0-rc2}"
|
||||
: "${EDEN_ROOM_ARCH:=x86_64-unknown-linux-musl}"
|
||||
: "${PORT:=24872}"
|
||||
}
|
||||
|
||||
create_user() {
|
||||
if ! id "${EDEN_USER}" &>/dev/null; then
|
||||
useradd -r -s /usr/sbin/nologin -d "${REPO_DIR}" "${EDEN_USER}"
|
||||
echo "Created system user: ${EDEN_USER}"
|
||||
fi
|
||||
}
|
||||
|
||||
setup_env() {
|
||||
if [[ ! -f "${ENV_FILE}" ]]; then
|
||||
cp "${ENV_EXAMPLE}" "${ENV_FILE}"
|
||||
chmod 600 "${ENV_FILE}"
|
||||
echo "Created ${ENV_FILE} from env.example — edit it before starting the service."
|
||||
else
|
||||
echo "Using existing ${ENV_FILE}"
|
||||
fi
|
||||
}
|
||||
|
||||
download_binary() {
|
||||
mkdir -p "${BINARY_DIR}"
|
||||
local url="${BASE_URL}/${EDEN_RELEASE_VERSION}/eden-room-${EDEN_ROOM_ARCH}"
|
||||
echo "Downloading eden-room ${EDEN_RELEASE_VERSION} (${EDEN_ROOM_ARCH})..."
|
||||
curl -fsSL "${url}" -o "${BINARY}.tmp"
|
||||
chmod +x "${BINARY}.tmp"
|
||||
mv "${BINARY}.tmp" "${BINARY}"
|
||||
echo "Installed ${BINARY}"
|
||||
}
|
||||
|
||||
setup_firewall() {
|
||||
if command -v ufw &>/dev/null && ufw status | grep -q "Status: active"; then
|
||||
ufw allow "${PORT}/tcp" comment "eden-room"
|
||||
ufw allow "${PORT}/udp" comment "eden-room"
|
||||
echo "UFW rules added for port ${PORT} (tcp/udp)"
|
||||
else
|
||||
echo "UFW not active — open port ${PORT}/tcp and ${PORT}/udp in your cloud firewall manually."
|
||||
fi
|
||||
}
|
||||
|
||||
install_systemd() {
|
||||
cat > "${SERVICE_FILE}" <<EOF
|
||||
[Unit]
|
||||
Description=Eden Multiplayer Room (${SERVICE_NAME})
|
||||
Documentation=https://github.com/eden-emulator/mirror/blob/master/docs/user/Multiplayer.md
|
||||
After=network-online.target
|
||||
Wants=network-online.target
|
||||
|
||||
[Service]
|
||||
Type=simple
|
||||
User=${EDEN_USER}
|
||||
Group=${EDEN_GROUP}
|
||||
WorkingDirectory=${REPO_DIR}
|
||||
ExecStart=${REPO_DIR}/scripts/start-room.sh
|
||||
Restart=on-failure
|
||||
RestartSec=10
|
||||
# Hardening
|
||||
NoNewPrivileges=true
|
||||
ProtectSystem=strict
|
||||
ProtectHome=true
|
||||
ReadWritePaths=${REPO_DIR}
|
||||
PrivateTmp=true
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
EOF
|
||||
|
||||
systemctl daemon-reload
|
||||
systemctl enable "${SERVICE_NAME}"
|
||||
echo "Installed and enabled ${SERVICE_FILE}"
|
||||
}
|
||||
|
||||
fix_permissions() {
|
||||
chown -R "${EDEN_USER}:${EDEN_GROUP}" "${REPO_DIR}"
|
||||
chmod 700 "${REPO_DIR}/scripts/"*.sh
|
||||
chmod 600 "${ENV_FILE}" 2>/dev/null || true
|
||||
chmod +x "${BINARY}"
|
||||
}
|
||||
|
||||
metaserver_hosts_hint() {
|
||||
if ! grep -q 'api.ynet-fun.xyz' /etc/hosts 2>/dev/null; then
|
||||
echo ""
|
||||
echo "Tip: if public lobby registration fails, add to /etc/hosts:"
|
||||
echo " 28.165.181.135 api.ynet-fun.xyz"
|
||||
fi
|
||||
}
|
||||
|
||||
binary_only() {
|
||||
require_root
|
||||
load_env
|
||||
download_binary
|
||||
fix_permissions
|
||||
echo "Binary updated at ${BINARY}"
|
||||
}
|
||||
|
||||
main() {
|
||||
if [[ "${1:-}" == "--binary-only" ]]; then
|
||||
binary_only
|
||||
return
|
||||
fi
|
||||
|
||||
require_root
|
||||
load_env
|
||||
create_user
|
||||
setup_env
|
||||
download_binary
|
||||
setup_firewall
|
||||
install_systemd
|
||||
fix_permissions
|
||||
metaserver_hosts_hint
|
||||
|
||||
echo ""
|
||||
echo "Install complete."
|
||||
echo " 1. Edit ${ENV_FILE} (set EDEN_TOKEN and ROOM_NAME)"
|
||||
echo " 2. sudo systemctl start ${SERVICE_NAME}"
|
||||
echo " 3. sudo journalctl -u eden-room -f"
|
||||
}
|
||||
|
||||
main "$@"
|
||||
Executable
+55
@@ -0,0 +1,55 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
ENV_FILE="${REPO_DIR}/.env"
|
||||
BINARY="${REPO_DIR}/bin/eden-room"
|
||||
BANLIST="${REPO_DIR}/banlist.txt"
|
||||
LOG_FILE="${REPO_DIR}/logs/eden-room.log"
|
||||
|
||||
if [[ ! -f "${ENV_FILE}" ]]; then
|
||||
echo "Missing ${ENV_FILE}. Copy env.example to .env and configure it." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
# shellcheck source=/dev/null
|
||||
source "${ENV_FILE}"
|
||||
|
||||
: "${ROOM_NAME:?ROOM_NAME is required in .env}"
|
||||
: "${PREFERRED_GAME:?PREFERRED_GAME is required in .env}"
|
||||
: "${PREFERRED_GAME_ID:?PREFERRED_GAME_ID is required in .env}"
|
||||
: "${PORT:=24872}"
|
||||
: "${MAX_MEMBERS:=8}"
|
||||
: "${BIND_ADDRESS:=0.0.0.0}"
|
||||
: "${WEB_API_URL:=https://api.ynet-fun.xyz}"
|
||||
|
||||
if [[ ! -x "${BINARY}" ]]; then
|
||||
echo "Missing ${BINARY}. Run scripts/install.sh first." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
mkdir -p "${REPO_DIR}/logs"
|
||||
|
||||
ARGS=(
|
||||
--room-name "${ROOM_NAME}"
|
||||
--room-description "${ROOM_DESCRIPTION:-Smash Ultimate lobby}"
|
||||
--preferred-game "${PREFERRED_GAME}"
|
||||
--preferred-game-id "${PREFERRED_GAME_ID}"
|
||||
--port "${PORT}"
|
||||
--max-members "${MAX_MEMBERS}"
|
||||
--bind-address "${BIND_ADDRESS}"
|
||||
--ban-list-file "${BANLIST}"
|
||||
--log-file "${LOG_FILE}"
|
||||
)
|
||||
|
||||
if [[ -n "${PASSWORD:-}" ]]; then
|
||||
ARGS+=(--password "${PASSWORD}")
|
||||
fi
|
||||
|
||||
if [[ -n "${EDEN_TOKEN:-}" ]]; then
|
||||
ARGS+=(--token "${EDEN_TOKEN}" --web-api-url "${WEB_API_URL}")
|
||||
else
|
||||
echo "Warning: EDEN_TOKEN is empty — hosting as unlisted/private room." >&2
|
||||
fi
|
||||
|
||||
exec "${BINARY}" "${ARGS[@]}"
|
||||
Executable
+35
@@ -0,0 +1,35 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
REPO_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
|
||||
SERVICE_NAME="eden-room"
|
||||
UPDATE_BINARY="${UPDATE_BINARY:-0}"
|
||||
|
||||
require_root() {
|
||||
if [[ "${EUID}" -ne 0 ]]; then
|
||||
echo "Run as root: sudo $0" >&2
|
||||
exit 1
|
||||
fi
|
||||
}
|
||||
|
||||
main() {
|
||||
require_root
|
||||
|
||||
echo "Pulling latest config from git..."
|
||||
git -C "${REPO_DIR}" pull --ff-only
|
||||
|
||||
if [[ "${UPDATE_BINARY}" == "1" ]]; then
|
||||
echo "Re-downloading eden-room binary..."
|
||||
"${REPO_DIR}/scripts/install.sh" --binary-only
|
||||
else
|
||||
chown -R eden:eden "${REPO_DIR}"
|
||||
chmod 700 "${REPO_DIR}/scripts/"*.sh
|
||||
chmod 600 "${REPO_DIR}/.env" 2>/dev/null || true
|
||||
fi
|
||||
|
||||
systemctl restart "${SERVICE_NAME}"
|
||||
echo "Updated and restarted ${SERVICE_NAME}."
|
||||
systemctl status "${SERVICE_NAME}" --no-pager
|
||||
}
|
||||
|
||||
main "$@"
|
||||
Reference in New Issue
Block a user