initial commit

.github/workflows/update-geoip-db.yaml

@@ -0,0 +1,81 @@
+name: update geoip-db
+
+on:
+  schedule:
+    - cron: '0 0 * * *'
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+concurrency:
+  group: update-geoip-db
+  cancel-in-progress: false
+
+jobs:
+  refresh-db:
+    runs-on: blacksmith-2vcpu-ubuntu-2404
+    timeout-minutes: 10
+
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Set up SSH agent
+        uses: webfactory/ssh-agent@v0.9.1
+        with:
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY_SERVER }}
+
+      - name: Add server to known hosts
+        run: |
+          set -euo pipefail
+          mkdir -p ~/.ssh
+          ssh-keyscan -H ${{ secrets.SERVER_IP }} >> ~/.ssh/known_hosts
+
+      - name: Refresh MMDB on server & roll restart
+        env:
+          SERVER: ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_IP }}
+          IPINFO_TOKEN: ${{ secrets.IPINFO_TOKEN }}
+        run: |
+          set -euo pipefail
+
+          ssh "${SERVER}" bash << EOSSH
+            set -euo pipefail
+
+            if ! command -v curl >/dev/null 2>&1; then
+              sudo apt-get update -y
+              sudo apt-get install -y curl
+            fi
+
+            if ! command -v go >/dev/null 2>&1; then
+              sudo apt-get update -y
+              sudo apt-get install -y golang-go
+            fi
+
+            export PATH="\$PATH:\$(go env GOPATH)/bin"
+            if ! command -v mmdbverify >/dev/null 2>&1; then
+              GOBIN="\$(go env GOPATH)/bin" go install github.com/maxmind/mmdbverify@latest
+            fi
+
+            TMPDIR="\$(mktemp -d)"
+            trap 'rm -rf "\$TMPDIR"' EXIT
+
+            DEST_DIR="/etc/fluxer"
+            DEST_DB="\${DEST_DIR}/ipinfo_lite.mmdb"
+
+            mkdir -p "\$DEST_DIR"
+
+            curl -fsSL -o "\$TMPDIR/ipinfo_lite.mmdb" \
+              "https://ipinfo.io/data/ipinfo_lite.mmdb?token=${IPINFO_TOKEN}"
+
+            [ -s "\$TMPDIR/ipinfo_lite.mmdb" ]
+
+            mmdbverify -file "\$TMPDIR/ipinfo_lite.mmdb"
+
+            install -m 0644 "\$TMPDIR/ipinfo_lite.mmdb" "\$DEST_DB.tmp"
+            mv -f "\$DEST_DB.tmp" "\$DEST_DB"
+
+            docker service update --force fluxer-geoip_app
+          EOSSH