[HLCC-ICE-000001][ZY-CONTRIB-20260723-001] feat: 以来光者贡献链启用冰朔第五域个人子频道

server-tools/zero-sense-team-node/finalize-after-download.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+NODE_ID=${NODE_ID:-HE-GZ-001}
+CACHE=${FORGEJO_BINARY_CACHE:-/var/cache/guanghu/forgejo-16.0.0-linux-amd64}
+EXPECTED_SHA256=${FORGEJO_SHA256:-c686f95df0b025d6075eaf4722f67179b945a1556acfc552408eeab624ed4f28}
+TEMPLATE_DIR=${TEMPLATE_DIR:-/root/guanghu-bootstrap/zero-sense-team-node}
+
+printf '%s  %s\n' "$EXPECTED_SHA256" "$CACHE" | sha256sum -c -
+install -m 0755 "$CACHE" /usr/local/bin/forgejo
+
+getent group git >/dev/null || groupadd --system git
+id -u git >/dev/null 2>&1 || useradd --system --shell /bin/bash --gid git --home-dir /home/git --create-home git
+install -d -o git -g git -m 0750 /var/lib/forgejo /var/lib/forgejo/data /var/lib/forgejo/log /var/lib/forgejo/custom
+install -d -o root -g git -m 0750 /etc/forgejo
+install -d -m 0700 /var/backups/guanghu/forgejo
+
+if [[ ! -f /etc/forgejo/app.ini ]]; then
+  install -o root -g git -m 0640 "$TEMPLATE_DIR/app.ini.template" /etc/forgejo/app.ini
+  secret_key=$(forgejo generate secret SECRET_KEY)
+  internal_token=$(forgejo generate secret INTERNAL_TOKEN)
+  sed -i "s|__SECRET_KEY__|$secret_key|; s|__INTERNAL_TOKEN__|$internal_token|" /etc/forgejo/app.ini
+fi
+
+install -m 0644 "$TEMPLATE_DIR/forgejo.service" /etc/systemd/system/forgejo.service
+install -m 0755 "$TEMPLATE_DIR/backup.sh" /usr/local/sbin/guanghu-forgejo-backup
+install -m 0755 "$TEMPLATE_DIR/health-check.sh" /usr/local/sbin/guanghu-zero-sense-health
+
+cat > /etc/systemd/system/guanghu-forgejo-backup.service <<'EOF'
+[Unit]
+Description=Guanghu Forgejo consistent backup
+After=forgejo.service
+[Service]
+Type=oneshot
+ExecStart=/usr/local/sbin/guanghu-forgejo-backup
+EOF
+cat > /etc/systemd/system/guanghu-forgejo-backup.timer <<'EOF'
+[Unit]
+Description=Daily Guanghu Forgejo backup
+[Timer]
+OnCalendar=daily
+Persistent=true
+RandomizedDelaySec=30m
+[Install]
+WantedBy=timers.target
+EOF
+
+systemctl daemon-reload
+systemctl enable --now forgejo.service guanghu-forgejo-backup.timer
+sleep 2
+guanghu-zero-sense-health | tee "/var/lib/forgejo/health-${NODE_ID}-$(date -u +%Y%m%dT%H%M%SZ).json"
+guanghu-forgejo-backup
+touch /var/lib/forgejo/FORGEJO_DEPLOYED_AND_VERIFIED
+printf 'ZERO_SENSE_FORGEJO_READY=%s\n' "$NODE_ID"