mirror of
https://github.com/NoFxAiOS/nofx.git
synced 2025-12-06 13:54:41 +08:00
452 lines
15 KiB
Bash
Executable File
452 lines
15 KiB
Bash
Executable File
#!/bin/bash
|
||
|
||
# ═══════════════════════════════════════════════════════════════
|
||
# NOFX AI Trading System - Docker Quick Start Script
|
||
# Usage: ./start.sh [command]
|
||
# ═══════════════════════════════════════════════════════════════
|
||
|
||
set -e
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Color Definitions
|
||
# ------------------------------------------------------------------------
|
||
RED='\033[0;31m'
|
||
GREEN='\033[0;32m'
|
||
YELLOW='\033[1;33m'
|
||
BLUE='\033[0;34m'
|
||
NC='\033[0m' # No Color
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Utility Functions: Colored Output
|
||
# ------------------------------------------------------------------------
|
||
print_info() {
|
||
echo -e "${BLUE}[INFO]${NC} $1"
|
||
}
|
||
|
||
print_success() {
|
||
echo -e "${GREEN}[SUCCESS]${NC} $1"
|
||
}
|
||
|
||
print_warning() {
|
||
echo -e "${YELLOW}[WARNING]${NC} $1"
|
||
}
|
||
|
||
print_error() {
|
||
echo -e "${RED}[ERROR]${NC} $1"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Detection: Docker Compose Command (Backward Compatible)
|
||
# ------------------------------------------------------------------------
|
||
detect_compose_cmd() {
|
||
if command -v docker compose &> /dev/null; then
|
||
COMPOSE_CMD="docker compose"
|
||
elif command -v docker-compose &> /dev/null; then
|
||
COMPOSE_CMD="docker-compose"
|
||
else
|
||
print_error "Docker Compose 未安装！请先安装 Docker Compose"
|
||
exit 1
|
||
fi
|
||
print_info "使用 Docker Compose 命令: $COMPOSE_CMD"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Validation: Docker Installation
|
||
# ------------------------------------------------------------------------
|
||
check_docker() {
|
||
if ! command -v docker &> /dev/null; then
|
||
print_error "Docker 未安装！请先安装 Docker: https://docs.docker.com/get-docker/"
|
||
exit 1
|
||
fi
|
||
|
||
detect_compose_cmd
|
||
print_success "Docker 和 Docker Compose 已安装"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Validation: Environment File (.env)
|
||
# ------------------------------------------------------------------------
|
||
check_env() {
|
||
if [ ! -f ".env" ]; then
|
||
print_warning ".env 不存在，从模板复制..."
|
||
cp .env.example .env
|
||
print_info "✓ 已使用默认环境变量创建 .env"
|
||
print_info "💡 如需修改端口等设置，可编辑 .env 文件"
|
||
fi
|
||
print_success "环境变量文件存在"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Validation: Encryption Environment (RSA Keys + Data Encryption Key)
|
||
# ------------------------------------------------------------------------
|
||
check_encryption() {
|
||
local need_setup=false
|
||
|
||
print_info "检查加密环境..."
|
||
|
||
# 检查RSA密钥对
|
||
if [ ! -f "secrets/rsa_key" ] || [ ! -f "secrets/rsa_key.pub" ]; then
|
||
print_warning "RSA密钥对不存在"
|
||
need_setup=true
|
||
fi
|
||
|
||
# 检查数据加密密钥
|
||
if [ ! -f ".env" ] || ! grep -q "^DATA_ENCRYPTION_KEY=" .env; then
|
||
print_warning "数据加密密钥未配置"
|
||
need_setup=true
|
||
fi
|
||
|
||
# 检查JWT认证密钥
|
||
if [ ! -f ".env" ] || ! grep -q "^JWT_SECRET=" .env; then
|
||
print_warning "JWT认证密钥未配置"
|
||
need_setup=true
|
||
fi
|
||
|
||
# 如果需要设置加密环境，直接自动设置
|
||
if [ "$need_setup" = "true" ]; then
|
||
print_info "🔐 检测到加密环境未配置，正在自动设置..."
|
||
print_info "加密环境用于保护敏感数据（API密钥、私钥等）"
|
||
echo ""
|
||
|
||
# 检查加密设置脚本是否存在
|
||
if [ -f "scripts/setup_encryption.sh" ]; then
|
||
print_info "加密系统将保护: API密钥、私钥、Hyperliquid代理钱包"
|
||
echo ""
|
||
|
||
# 自动运行加密设置脚本
|
||
echo -e "Y\nn\nn" | bash scripts/setup_encryption.sh
|
||
if [ $? -eq 0 ]; then
|
||
echo ""
|
||
print_success "🔐 加密环境设置完成！"
|
||
print_info " • RSA-2048密钥对已生成"
|
||
print_info " • AES-256数据加密密钥已配置"
|
||
print_info " • JWT认证密钥已配置"
|
||
print_info " • 所有敏感数据现在都受加密保护"
|
||
echo ""
|
||
else
|
||
print_error "加密环境设置失败"
|
||
exit 1
|
||
fi
|
||
else
|
||
print_error "加密设置脚本不存在: scripts/setup_encryption.sh"
|
||
print_info "请手动运行: ./scripts/setup_encryption.sh"
|
||
exit 1
|
||
fi
|
||
else
|
||
print_success "🔐 加密环境已配置"
|
||
print_info " • RSA密钥对: secrets/rsa_key + secrets/rsa_key.pub"
|
||
print_info " • 数据加密密钥: .env (DATA_ENCRYPTION_KEY)"
|
||
print_info " • JWT认证密钥: .env (JWT_SECRET)"
|
||
print_info " • 加密算法: RSA-OAEP-2048 + AES-256-GCM + HS256"
|
||
print_info " • 保护数据: API密钥、私钥、Hyperliquid代理钱包、用户认证"
|
||
|
||
# 验证密钥文件权限
|
||
if [ -f "secrets/rsa_key" ]; then
|
||
local perm=$(stat -f "%A" "secrets/rsa_key" 2>/dev/null || stat -c "%a" "secrets/rsa_key" 2>/dev/null)
|
||
if [ "$perm" != "600" ]; then
|
||
print_warning "修复RSA私钥权限..."
|
||
chmod 600 secrets/rsa_key
|
||
fi
|
||
fi
|
||
|
||
if [ -f ".env" ]; then
|
||
local perm=$(stat -f "%A" ".env" 2>/dev/null || stat -c "%a" ".env" 2>/dev/null)
|
||
if [ "$perm" != "600" ]; then
|
||
print_warning "修复环境文件权限..."
|
||
chmod 600 .env
|
||
fi
|
||
fi
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Validation: Configuration File (config.json) - BASIC SETTINGS ONLY
|
||
# ------------------------------------------------------------------------
|
||
check_config() {
|
||
if [ ! -f "config.json" ]; then
|
||
print_warning "config.json 不存在，从模板复制..."
|
||
cp config.json.example config.json
|
||
print_info "✓ 已使用默认配置创建 config.json"
|
||
print_info "💡 如需修改基础设置（杠杆大小、开仓币种、管理员模式、JWT密钥等），可编辑 config.json"
|
||
print_info "💡 模型/交易所/交易员配置请使用Web界面"
|
||
fi
|
||
print_success "配置文件存在"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Utility: Read Environment Variables
|
||
# ------------------------------------------------------------------------
|
||
read_env_vars() {
|
||
if [ -f ".env" ]; then
|
||
# 读取端口配置，设置默认值
|
||
NOFX_FRONTEND_PORT=$(grep "^NOFX_FRONTEND_PORT=" .env 2>/dev/null | cut -d'=' -f2 || echo "3000")
|
||
NOFX_BACKEND_PORT=$(grep "^NOFX_BACKEND_PORT=" .env 2>/dev/null | cut -d'=' -f2 || echo "8080")
|
||
|
||
# 去除可能的引号和空格
|
||
NOFX_FRONTEND_PORT=$(echo "$NOFX_FRONTEND_PORT" | tr -d '"'"'" | tr -d ' ')
|
||
NOFX_BACKEND_PORT=$(echo "$NOFX_BACKEND_PORT" | tr -d '"'"'" | tr -d ' ')
|
||
|
||
# 如果为空则使用默认值
|
||
NOFX_FRONTEND_PORT=${NOFX_FRONTEND_PORT:-3000}
|
||
NOFX_BACKEND_PORT=${NOFX_BACKEND_PORT:-8080}
|
||
else
|
||
# 如果.env不存在，使用默认端口
|
||
NOFX_FRONTEND_PORT=3000
|
||
NOFX_BACKEND_PORT=8080
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Validation: Database File (config.db)
|
||
# ------------------------------------------------------------------------
|
||
check_database() {
|
||
if [ -d "config.db" ]; then
|
||
# 如果存在的是目录，删除它
|
||
print_warning "config.db 是目录而非文件，正在删除目录..."
|
||
rm -rf config.db
|
||
print_info "✓ 已删除目录，现在创建文件..."
|
||
install -m 600 /dev/null config.db
|
||
print_success "✓ 已创建空数据库文件（权限: 600），系统将在启动时初始化"
|
||
elif [ ! -f "config.db" ]; then
|
||
# 如果不存在文件，创建它
|
||
print_warning "数据库文件不存在，创建空数据库文件..."
|
||
# 创建空文件以避免Docker创建目录（使用安全权限600）
|
||
install -m 600 /dev/null config.db
|
||
print_info "✓ 已创建空数据库文件（权限: 600），系统将在启动时初始化"
|
||
else
|
||
# 文件存在
|
||
print_success "数据库文件存在"
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Build: Frontend (Node.js Based)
|
||
# ------------------------------------------------------------------------
|
||
# build_frontend() {
|
||
# print_info "检查前端构建环境..."
|
||
|
||
# if ! command -v node &> /dev/null; then
|
||
# print_error "Node.js 未安装！请先安装 Node.js"
|
||
# exit 1
|
||
# fi
|
||
|
||
# if ! command -v npm &> /dev/null; then
|
||
# print_error "npm 未安装！请先安装 npm"
|
||
# exit 1
|
||
# fi
|
||
|
||
# print_info "正在构建前端..."
|
||
# cd web
|
||
|
||
# print_info "安装 Node.js 依赖..."
|
||
# npm install
|
||
|
||
# print_info "构建前端应用..."
|
||
# npm run build
|
||
|
||
# cd ..
|
||
# print_success "前端构建完成"
|
||
# }
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Service Management: Start
|
||
# ------------------------------------------------------------------------
|
||
start() {
|
||
print_info "正在启动 NOFX AI Trading System..."
|
||
|
||
# 读取环境变量
|
||
read_env_vars
|
||
|
||
# 确保必要的文件和目录存在（修复 Docker volume 挂载问题）
|
||
if [ ! -f "config.db" ]; then
|
||
print_info "创建数据库文件..."
|
||
install -m 600 /dev/null config.db
|
||
fi
|
||
if [ ! -d "decision_logs" ]; then
|
||
print_info "创建日志目录..."
|
||
install -m 700 -d decision_logs
|
||
fi
|
||
|
||
# Auto-build frontend if missing or forced
|
||
# if [ ! -d "web/dist" ] || [ "$1" == "--build" ]; then
|
||
# build_frontend
|
||
# fi
|
||
|
||
# Rebuild images if flag set
|
||
if [ "$1" == "--build" ]; then
|
||
print_info "重新构建镜像..."
|
||
$COMPOSE_CMD up -d --build
|
||
else
|
||
print_info "启动容器..."
|
||
$COMPOSE_CMD up -d
|
||
fi
|
||
|
||
print_success "服务已启动！"
|
||
print_info "Web 界面: http://localhost:${NOFX_FRONTEND_PORT}"
|
||
print_info "API 端点: http://localhost:${NOFX_BACKEND_PORT}"
|
||
print_info ""
|
||
print_info "查看日志: ./start.sh logs"
|
||
print_info "停止服务: ./start.sh stop"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Service Management: Stop
|
||
# ------------------------------------------------------------------------
|
||
stop() {
|
||
print_info "正在停止服务..."
|
||
$COMPOSE_CMD stop
|
||
print_success "服务已停止"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Service Management: Restart
|
||
# ------------------------------------------------------------------------
|
||
restart() {
|
||
print_info "正在重启服务..."
|
||
$COMPOSE_CMD restart
|
||
print_success "服务已重启"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Monitoring: Logs
|
||
# ------------------------------------------------------------------------
|
||
logs() {
|
||
if [ -z "$2" ]; then
|
||
$COMPOSE_CMD logs -f
|
||
else
|
||
$COMPOSE_CMD logs -f "$2"
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Monitoring: Status
|
||
# ------------------------------------------------------------------------
|
||
status() {
|
||
# 读取环境变量
|
||
read_env_vars
|
||
|
||
print_info "服务状态:"
|
||
$COMPOSE_CMD ps
|
||
echo ""
|
||
print_info "健康检查:"
|
||
curl -s "http://localhost:${NOFX_BACKEND_PORT}/api/health" | jq '.' || echo "后端未响应"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Maintenance: Clean (Destructive)
|
||
# ------------------------------------------------------------------------
|
||
clean() {
|
||
print_warning "这将删除所有容器和数据！"
|
||
read -p "确认删除？(yes/no): " confirm
|
||
if [ "$confirm" == "yes" ]; then
|
||
print_info "正在清理..."
|
||
$COMPOSE_CMD down -v
|
||
print_success "清理完成"
|
||
else
|
||
print_info "已取消"
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Maintenance: Update
|
||
# ------------------------------------------------------------------------
|
||
update() {
|
||
print_info "正在更新..."
|
||
git pull
|
||
$COMPOSE_CMD up -d --build
|
||
print_success "更新完成"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Encryption: Manual Setup
|
||
# ------------------------------------------------------------------------
|
||
setup_encryption_manual() {
|
||
print_info "🔐 手动设置加密环境"
|
||
|
||
if [ -f "scripts/setup_encryption.sh" ]; then
|
||
bash scripts/setup_encryption.sh
|
||
else
|
||
print_error "加密设置脚本不存在: scripts/setup_encryption.sh"
|
||
print_info "请确保项目文件完整"
|
||
exit 1
|
||
fi
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Help: Usage Information
|
||
# ------------------------------------------------------------------------
|
||
show_help() {
|
||
echo "NOFX AI Trading System - Docker 管理脚本"
|
||
echo ""
|
||
echo "用法: ./start.sh [command] [options]"
|
||
echo ""
|
||
echo "命令:"
|
||
echo " start [--build] 启动服务（可选：重新构建）"
|
||
echo " stop 停止服务"
|
||
echo " restart 重启服务"
|
||
echo " logs [service] 查看日志（可选：指定服务名 backend/frontend）"
|
||
echo " status 查看服务状态"
|
||
echo " clean 清理所有容器和数据"
|
||
echo " update 更新代码并重启"
|
||
echo " setup-encryption 设置加密环境（RSA密钥+数据加密）"
|
||
echo " help 显示此帮助信息"
|
||
echo ""
|
||
echo "示例:"
|
||
echo " ./start.sh start --build # 构建并启动"
|
||
echo " ./start.sh logs backend # 查看后端日志"
|
||
echo " ./start.sh status # 查看状态"
|
||
echo " ./start.sh setup-encryption # 手动设置加密环境"
|
||
echo ""
|
||
echo "🔐 关于加密:"
|
||
echo " 系统自动检测加密环境，首次运行时会自动设置"
|
||
echo " 手动设置: ./scripts/setup_encryption.sh"
|
||
}
|
||
|
||
# ------------------------------------------------------------------------
|
||
# Main: Command Dispatcher
|
||
# ------------------------------------------------------------------------
|
||
main() {
|
||
check_docker
|
||
|
||
case "${1:-start}" in
|
||
start)
|
||
check_env
|
||
check_encryption
|
||
check_config
|
||
check_database
|
||
start "$2"
|
||
;;
|
||
stop)
|
||
stop
|
||
;;
|
||
restart)
|
||
restart
|
||
;;
|
||
logs)
|
||
logs "$@"
|
||
;;
|
||
status)
|
||
status
|
||
;;
|
||
clean)
|
||
clean
|
||
;;
|
||
update)
|
||
update
|
||
;;
|
||
setup-encryption)
|
||
setup_encryption_manual
|
||
;;
|
||
help|--help|-h)
|
||
show_help
|
||
;;
|
||
*)
|
||
print_error "未知命令: $1"
|
||
show_help
|
||
exit 1
|
||
;;
|
||
esac
|
||
}
|
||
|
||
# Execute Main
|
||
main "$@" |