XH-202626/deploy_to_server.py

# -*- coding: utf-8 -*-
"""
部署系统到远程服务器 159.75.81.121
"""
import os
import tarfile
import paramiko
import time

SERVER_IP = "159.75.81.121"
SSH_PORT = 22
SSH_USER = "root"
SSH_PASS = "sp-cc123"
REMOTE_DIR = "/opt/XH-202626"
DOMAIN = "risk.aiformat.cn"

LOCAL_BASE = r"d:\code\XH-202626_科创企业特有风险的识别与管理"
ARCHIVE_NAME = os.path.join(LOCAL_BASE, "deploy_package.tar.gz")

def make_archive():
    print("[打包] 正在打部署压缩包...")
    includes = [
        "系统首页.py",
        "app.py",
        "config.py",
        "requirements.txt",
        "agents",
        "collectors",
        "data",
        "knowledge_graph",
        "lib",
        "pages",
        "risk_engine",
        "utils",
        ".streamlit"
    ]
    
    with tarfile.open(ARCHIVE_NAME, "w:gz") as tar:
        for item in includes:
            full_path = os.path.join(LOCAL_BASE, item)
            if os.path.exists(full_path):
                print(f"  + 打包: {item}")
                tar.add(full_path, arcname=item)
            else:
                print(f"  - 跳过(不存在): {item}")
    print(f"[打包] 压缩完成: {ARCHIVE_NAME}")

def run_remote_cmd(ssh, cmd):
    print(f"\n[远程命令] {cmd}")
    stdin, stdout, stderr = ssh.exec_command(cmd)
    out = stdout.read().decode('utf-8', errors='ignore')
    err = stderr.read().decode('utf-8', errors='ignore')
    if out:
        print(f"[STDOUT]\n{out.strip()}")
    if err:
        print(f"[STDERR]\n{err.strip()}")
    return out, err

def deploy():
    make_archive()
    
    print(f"\n[连接] 正在连接服务器 {SERVER_IP}...")
    ssh = paramiko.SSHClient()
    ssh.set_missing_host_key_policy(paramiko.AutoAddPolicy())
    try:
        ssh.connect(SERVER_IP, port=SSH_PORT, username=SSH_USER, password=SSH_PASS, timeout=15)
        print("[连接] SSH 连接成功")
    except Exception as e:
        print(f"[错误] SSH 连接失败: {e}")
        return

    sftp = ssh.open_sftp()
    
    # 0. 停止并清理可能残留的冲突服务
    run_remote_cmd(ssh, "systemctl stop risk_app 2>/dev/null || true")
    run_remote_cmd(ssh, "systemctl disable risk_app 2>/dev/null || true")
    run_remote_cmd(ssh, "rm -f /etc/systemd/system/risk_app.service")
    run_remote_cmd(ssh, "rm -rf /opt/risk_system")
    
    # 1. 创建远程目录并清理旧的带 emoji 文件
    run_remote_cmd(ssh, f"mkdir -p {REMOTE_DIR}")
    run_remote_cmd(ssh, f"rm -rf {REMOTE_DIR}/pages/* {REMOTE_DIR}/*系统首页*.py")
    
    # 2. 上传压缩包
    remote_archive = f"{REMOTE_DIR}/deploy_package.tar.gz"
    print(f"[上传] 正在上传压缩包到 {remote_archive}...")
    sftp.put(ARCHIVE_NAME, remote_archive)
    print("[上传] 压缩包上传成功")
    sftp.close()

    # 3. 解压并优先尝试 git pull 同步
    run_remote_cmd(ssh, f"cd {REMOTE_DIR} && tar -xzf deploy_package.tar.gz")
    run_remote_cmd(ssh, f"cd {REMOTE_DIR} && git pull origin master || true")

    # 4. 配置 Systemd 服务 (使用已配置好的 miniconda risk_env 环境)
    systemd_service = f"""[Unit]
Description=Risk Management Streamlit Web App (risk.aiformat.cn)
After=network.target

[Service]
User=root
WorkingDirectory={REMOTE_DIR}
ExecStart=/root/miniconda3/envs/risk_env/bin/streamlit run {REMOTE_DIR}/系统首页.py --server.port 8501 --server.address 127.0.0.1 --server.headless true --server.enableCORS false --server.enableXsrfProtection false
Restart=always
RestartSec=5
Environment=PATH=/root/miniconda3/envs/risk_env/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

[Install]
WantedBy=multi-user.target
"""
    create_service_cmd = f"cat << 'EOF' > /etc/systemd/system/XH-202626.service\n{systemd_service}\nEOF"
    run_remote_cmd(ssh, create_service_cmd)

    run_remote_cmd(ssh, "systemctl daemon-reload && systemctl enable XH-202626 && systemctl restart XH-202626")
    time.sleep(3)
    run_remote_cmd(ssh, "systemctl status XH-202626 --no-pager")

    # 5. 配置 Nginx 反向代理
    nginx_conf = f"""server {{
    listen 80;
    server_name {DOMAIN};

    location / {{
        proxy_pass http://127.0.0.1:8501;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_read_timeout 86400;
    }}

    location /_stcore/stream {{
        proxy_pass http://127.0.0.1:8501/_stcore/stream;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
    }}
}}
"""
    create_nginx_cmd = f"cat << 'EOF' > /etc/nginx/conf.d/risk.aiformat.cn.conf\n{nginx_conf}\nEOF"
    run_remote_cmd(ssh, create_nginx_cmd)

    # 兼容 Ubuntu/Debian sites-enabled
    run_remote_cmd(ssh, f"mkdir -p /etc/nginx/sites-enabled && ln -sf /etc/nginx/conf.d/risk.aiformat.cn.conf /etc/nginx/sites-enabled/risk.aiformat.cn.conf")

    run_remote_cmd(ssh, "nginx -t && systemctl restart nginx")
    time.sleep(2)
    run_remote_cmd(ssh, "systemctl status nginx --no-pager")

    # 6. 测试应用连通性
    run_remote_cmd(ssh, "curl -I http://127.0.0.1:8501")
    run_remote_cmd(ssh, f"curl -H 'Host: {DOMAIN}' -I http://127.0.0.1/")

    ssh.close()
    print("\n[完成] 部署完成！")
    print(f"[访问] 域名访问地址: http://{DOMAIN}")
    print(f"[验证] 服务器 IP 直连防护端口验证: http://{SERVER_IP}")

if __name__ == "__main__":
    deploy()