Mac Mini scripts

README.md

toolbox

This repository contains a set of tools to manage a mac mini server.

heartbeat.sh

The heartbeat.sh script is responsible for:

1. Fetching the latest changes from the main branch of the repository
2. If changes are detected, it pulls the latest changes, rebuilds the project using asdf install, and logs the rebuild process
3. If no changes are detected, it logs that no changes were found
4. Runs the toolbox.rb script and logs its output to heartbeat.log

toolbox.rb

The toolbox.rb script is the main entry point for the toolbox. It loads all the necessary libraries from the lib directory and performs various server management tasks.

Running heartbeat.sh automatically

To run heartbeat.sh automatically, you can use a LaunchAgent plist file and load it with the launchctl command.

1. Copy the co.contraption.toolbox.heartbeat.plist file to the ~/Library/LaunchAgents directory:

   cp co.contraption.toolbox.heartbeat.plist ~/Library/LaunchAgents/
   

2. Load the LaunchAgent using the following command:

   launchctl load ~/Library/LaunchAgents/co.contraption.toolbox.heartbeat.plist
   

The heartbeat.sh script will now run automatically according to the schedule defined in the co.contraption.toolbox.heartbeat.plist file. It will fetch changes, rebuild if necessary, and run the toolbox.rb script.

To unload the LaunchAgent and stop the automatic execution of heartbeat.sh, use the following command:

launchctl unload ~/Library/LaunchAgents/co.contraption.toolbox.heartbeat.plist

co.contraption.toolbox.heartbeat.plist

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Label</key>
    <string>co.contraption.toolbox.heartbeat</string>
    <key>ProgramArguments</key>
    <array>
        <string>/Users/philip/code/toolbox/heartbeat.sh</string>
    </array>
    <key>StartInterval</key>
    <integer>60</integer>
    <key>RunAtLoad</key>
    <true/>
    <key>StandardOutPath</key>
    <string>/Users/philip/code/toolbox/heartbeat.log</string>
    <key>StandardErrorPath</key>
    <string>/Users/philip/code/toolbox/heartbeat.log</string>
    <key>WorkingDirectory</key>
    <string>/Users/philip/code/toolbox</string>
    <key>EnvironmentVariables</key>
    <dict>
        <key>PATH</key>
        <string>/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin</string>
        <key>OP_SERVICE_ACCOUNT_TOKEN</key>
        <string>FILL THIS IN</string>
    </dict>
    <key>NSAllowsLocalNetworking</key>
    <true/>
    <key>AbandonProcessGroup</key>
    <true/>
</dict>
</plist>

heartbeat.sh

#!/usr/bin/env zsh
REPO_DIR=/Users/philip/code/toolbox/

# Move into the repository
cd "$REPO_DIR" || exit 1

# Fetch the latest changes
git fetch origin main

# Check if there are new commits not in the local main branch
UPSTREAM=$(git rev-parse origin/main)
LOCAL=$(git rev-parse main)

if [ "$UPSTREAM" != "$LOCAL" ]; then
  echo "$(date): Changes detected, pulling and rebuilding..."
  git pull origin main
  asdf install
  echo "$(date): Rebuild complete."

  ruby toolbox.rb code_changed
else
  echo "$(date): No changes detected."

  ruby toolbox.rb no_changes
fi

lib_ghost.rb

require 'open3'
require_relative '1password'

module Ghost
  CONTAINER_NAME = 'ghost'
  DATA_DIR = '/Users/philip/data/ghost'

  def self.get_container_id
    stdout, stderr, status = Open3.capture3("docker ps --filter \"name=#{CONTAINER_NAME}\" --format \"{{.ID}}\"")
    raise "Error checking for Ghost container: #{stderr}" unless status.success?

    stdout.strip
  end

  def self.running?
    container_id = get_container_id
    return false if container_id.empty?

    stdout, stderr, status = Open3.capture3("docker inspect --format \"{{.State.Running}}\" #{container_id}")
    raise "Error inspecting Ghost container: #{stderr}" unless status.success?

    stdout.strip == 'true'
  end

  def self.start
    # Ensure the data directory exists
    `mkdir -p "#{DATA_DIR}"`

    # Fetch database credentials from 1Password
    mysql_user = OnePassword.get_item('MySQL Docker', 'username')
    mysql_password = OnePassword.get_item('MySQL Docker', 'password')

    # Fetch Mailgun credentials from 1Password
    mailgun_username = OnePassword.get_item('Mailgun', 'username')
    mailgun_password = OnePassword.get_item('Mailgun', 'password')

    cmd = <<~SHELL
      docker run -d \\
        --name #{CONTAINER_NAME} \\
        --restart unless-stopped \\
        --network #{TOOLBOX_NETWORK} \\
        -e url=https://www.contraption.co \\
        -e database__client=mysql \\
        -e database__connection__host=mysql \\
        -e database__connection__user="#{mysql_user}" \\
        -e database__connection__password="#{mysql_password}" \\
        -e database__connection__database=ghost \\
        -e mail__transport=SMTP \\
        -e mail__options__service=Mailgun \\
        -e mail__options__host=smtp.mailgun.org \\
        -e mail__options__port=465 \\
        -e mail__options__secure=true \\
        -e mail__options__auth__user="#{mailgun_username}" \\
        -e mail__options__auth__pass="#{mailgun_password}" \\
        -v #{DATA_DIR}:/var/lib/ghost/content \\
        -p 2368:2368 \\
        ghost:5.109.2
    SHELL

    stdout, stderr, status = Open3.capture3(cmd)
    raise "Error starting Ghost: #{stderr}" unless status.success?

    puts stdout
    true
  end

  def self.ensure_running
    if running?
      puts 'Ghost is already running'
    else
      puts 'Ghost is not running, starting it now...'
      start
      puts 'Ghost started successfully'
    end
  end
end

toolbox.rb

require 'net/http'
require 'uri'
require 'open3'

TOOLBOX_NETWORK = 'toolbox_network'

# Auto-load all files in the lib directory
Dir['./lib/*.rb'].each { |file| require file }

Docker.ensure_network_exists

code_changed = ARGV[0] == 'code_changed'

if Tunnel.tunnel_running?
  if code_changed
    puts 'Code changes detected, updating Cloudflare tunnel...'
    Tunnel.update_cloudflare_tunnel
  else
    puts 'No code changes detected, Cloudflare tunnel already running. No action needed.'
  end
else
  puts 'Cloudflare tunnel not running, starting a new one...'
  Tunnel.start_cloudflare_tunnel
end

OnePassword.ensure_logged_in

MySQL.ensure_running

Ghost.ensure_running

UptimeRobot.report