chore: sync local changes

2026-02-14 01:43:38 +08:00
parent e9093baffb
commit f38505e210
39 changed files with 342 additions and 2879 deletions
--- a/deploy/clickhouse/setup_clickhouse.sh
+++ b/deploy/clickhouse/setup_clickhouse.sh
@@ -0,0 +1,108 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+INSTALL_SCRIPT="${SCRIPT_DIR}/install_clickhouse_linux.sh"
+HTTPS_SCRIPT="${SCRIPT_DIR}/configure_clickhouse_https.sh"
+RUNTIME_SCRIPT="${SCRIPT_DIR}/configure_clickhouse_runtime.sh"
+TABLES_SCRIPT="${SCRIPT_DIR}/init_waf_logs_tables.sh"
+
+usage() {
+  cat <<'EOF'
+Usage:
+  sudo ./setup_clickhouse.sh [all|install|https|runtime|tables]
+
+Modes:
+  all      Install ClickHouse, configure HTTPS, apply runtime config, init ingest tables (default)
+  install  Install ClickHouse only
+  https    Configure HTTPS only
+  runtime  Apply ClickHouse runtime config only
+  tables   Initialize ingest tables only
+
+Common env vars:
+  CLICKHOUSE_DEFAULT_PASSWORD   Default user password set during install
+  CH_HTTPS_PORT                 HTTPS port (default: 8443)
+  CH_CERT_CN                    Certificate CN
+  CH_CERT_DNS                   Certificate SAN DNS list (comma-separated)
+  CH_CERT_IP                    Certificate SAN IP list (comma-separated)
+  CH_CERT_DAYS                  Certificate validity days (default: 825)
+  CH_LOG_LEVEL                  ClickHouse logger level (default: warning)
+  CH_HOST                       ClickHouse host for table init (default: 127.0.0.1)
+  CH_PORT                       ClickHouse port for table init (default: 9000)
+  CH_USER                       ClickHouse user for table init (default: default)
+  CH_PASSWORD                   ClickHouse password for table init
+  CH_DATABASE                   Database for table init (default: default)
+EOF
+}
+
+require_script() {
+  local script="$1"
+  if [[ ! -f "${script}" ]]; then
+    echo "[ERROR] required file not found: ${script}"
+    exit 1
+  fi
+}
+
+run_install() {
+  echo "[INFO] step 1/3: install ClickHouse ..."
+  bash "${INSTALL_SCRIPT}"
+}
+
+run_https() {
+  echo "[INFO] step 2/3: configure ClickHouse HTTPS ..."
+  bash "${HTTPS_SCRIPT}"
+}
+
+run_runtime() {
+  echo "[INFO] step 3/4: apply ClickHouse runtime config ..."
+  bash "${RUNTIME_SCRIPT}"
+}
+
+run_tables() {
+  echo "[INFO] step 4/4: initialize ingest tables ..."
+  bash "${TABLES_SCRIPT}"
+}
+
+MODE="${1:-all}"
+
+case "${MODE}" in
+  -h|--help|help)
+    usage
+    exit 0
+    ;;
+  all|install|https|runtime|tables)
+    ;;
+  *)
+    echo "[ERROR] invalid mode: ${MODE}"
+    usage
+    exit 1
+    ;;
+esac
+
+require_script "${INSTALL_SCRIPT}"
+require_script "${HTTPS_SCRIPT}"
+require_script "${RUNTIME_SCRIPT}"
+require_script "${TABLES_SCRIPT}"
+
+case "${MODE}" in
+  all)
+    run_install
+    run_https
+    run_runtime
+    run_tables
+    ;;
+  install)
+    run_install
+    ;;
+  https)
+    run_https
+    ;;
+  runtime)
+    run_runtime
+    ;;
+  tables)
+    run_tables
+    ;;
+esac
+
+echo "[OK] setup completed: mode=${MODE}"