feat: add dedicated DDS permission backoffice instance

scripts/deploy-dds-backoffice-local.sh

@@ -0,0 +1,105 @@
+#!/usr/bin/env bash
+# Deploy the dedicated DDS backoffice beside the existing VPD instance.
+set -Eeuo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+APP_DIR="${DDS_BACKOFFICE_APP_DIR:-/home/opc/apps/dds-backoffice}"
+PORT="${DDS_BACKOFFICE_PORT:-8083}"
+
+cd "$ROOT/dds-backoffice"
+mvn -DskipTests package
+JAR="$ROOT/dds-backoffice/target/dds-permission-backoffice-0.1.0-SNAPSHOT.jar"
+[[ -f "$JAR" ]] || { echo "missing jar: $JAR" >&2; exit 1; }
+
+install -d -o opc -g opc "$APP_DIR"
+
+cat > "$APP_DIR/start.sh" <<'START'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+cd "$APP_DIR"
+set -a
+if [[ -f /home/opc/apps/vpd-backoffice/.env ]]; then
+  . /home/opc/apps/vpd-backoffice/.env
+fi
+if [[ -f "$APP_DIR/.env" ]]; then
+  . "$APP_DIR/.env"
+fi
+set +a
+
+export DDS_BACKOFFICE_PORT="${DDS_BACKOFFICE_PORT:-8083}"
+export DDS_BACKOFFICE_BIND_ADDRESS="${DDS_BACKOFFICE_BIND_ADDRESS:-127.0.0.1}"
+export DDS_BACKOFFICE_DB_URL="${DDS_BACKOFFICE_DB_URL:-${BACKOFFICE_DB_URL:-}}"
+export DDS_BACKOFFICE_PG_PASSWORD="${DDS_BACKOFFICE_PG_PASSWORD:-${DDSUSER_PG_PASSWORD:-}}"
+export DDS_BACKOFFICE_MY_PASSWORD="${DDS_BACKOFFICE_MY_PASSWORD:-${DDSUSER_MY_PASSWORD:-}}"
+export DDS_BACKOFFICE_BOTH_PASSWORD="${DDS_BACKOFFICE_BOTH_PASSWORD:-${DDSUSER_BOTH_PASSWORD:-}}"
+export DDS_BACKOFFICE_NONE_PASSWORD="${DDS_BACKOFFICE_NONE_PASSWORD:-${DDSUSER_NONE_PASSWORD:-}}"
+
+PID_FILE="$APP_DIR/app.pid"
+LOG_FILE="$APP_DIR/app.log"
+if [[ -f "$PID_FILE" ]] && kill -0 "$(cat "$PID_FILE")" >/dev/null 2>&1; then
+  echo "already running pid=$(cat "$PID_FILE")"
+  exit 0
+fi
+
+setsid nohup java -jar "$APP_DIR/app.jar" > "$LOG_FILE" 2>&1 < /dev/null &
+echo $! > "$PID_FILE"
+echo "started pid=$(cat "$PID_FILE") log=$LOG_FILE port=$DDS_BACKOFFICE_PORT"
+START
+
+cat > "$APP_DIR/stop.sh" <<'STOP'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PID_FILE="$APP_DIR/app.pid"
+if [[ ! -f "$PID_FILE" ]]; then
+  echo "not running: pid file not found"
+  exit 0
+fi
+PID="$(cat "$PID_FILE")"
+if kill -0 "$PID" >/dev/null 2>&1; then
+  kill "$PID"
+  for _ in {1..20}; do
+    kill -0 "$PID" >/dev/null 2>&1 || break
+    sleep 1
+  done
+fi
+rm -f "$PID_FILE"
+echo "stopped"
+STOP
+
+cat > "$APP_DIR/status.sh" <<'STATUS'
+#!/usr/bin/env bash
+set -Eeuo pipefail
+APP_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PID_FILE="$APP_DIR/app.pid"
+if [[ -f "$PID_FILE" ]] && kill -0 "$(cat "$PID_FILE")" >/dev/null 2>&1; then
+  echo "running pid=$(cat "$PID_FILE")"
+else
+  echo "stopped"
+fi
+STATUS
+
+chmod +x "$APP_DIR/start.sh" "$APP_DIR/stop.sh" "$APP_DIR/status.sh"
+if [[ ! -f "$APP_DIR/.env" ]]; then
+  cat > "$APP_DIR/.env" <<ENV
+# DDS instance overrides. Secrets stay in the existing VPD env file or in this file.
+export DDS_BACKOFFICE_PORT="$PORT"
+export DDS_BACKOFFICE_BIND_ADDRESS="127.0.0.1"
+ENV
+  chmod 600 "$APP_DIR/.env"
+fi
+
+"$APP_DIR/stop.sh" || true
+install -o opc -g opc -m 0644 "$JAR" "$APP_DIR/app.jar"
+"$APP_DIR/start.sh"
+
+for _ in {1..30}; do
+  if "$APP_DIR/status.sh" | grep -q '^running ' && curl -fsS -o /dev/null "http://127.0.0.1:${PORT}/health"; then
+    break
+  fi
+  sleep 1
+done
+"$APP_DIR/status.sh"
+curl -sS -o /tmp/dds-backoffice-health.json -w 'health=%{http_code}\n' "http://127.0.0.1:${PORT}/health"
+echo "DDS backoffice deployed at ${APP_DIR} (loopback port ${PORT})"