v0.12.2 drop version from api path, deploy script update

deploy/freebsd/rc.d/chess_server

@@ -1,36 +0,0 @@
-#!/bin/sh
-#
-# PROVIDE: chess_server
-# REQUIRE: LOGIN postgresql
-# KEYWORD: shutdown
-#
-# rc.conf variables (setup-jail.sh sets them with sysrc):
-#   chess_server_enable   YES to start at boot
-#   chess_server_flags    chess-server arguments (-dsn, -jwt-secret-file, ...)
-#   chess_server_env      environment, including PATH=... for stockfish
-#   chess_server_account  unprivileged account (default: chess)
-#   chess_server_binary   default: /usr/local/chess/chess-server
-#   chess_server_logfile  default: /var/log/chess/chess-server.log
-#
-# daemon(8) starts as root, writes the supervisor pidfile, drops to the
-# account, restarts the server if it exits (-r, 5 s delay), and reopens the
-# log file on SIGHUP (-H) for newsyslog. Do not set chess_server_user: rc.subr
-# would switch users before daemon runs and daemon could not drop privileges.
-
-. /etc/rc.subr
-
-name=chess_server
-rcvar=chess_server_enable
-load_rc_config $name
-
-: ${chess_server_enable:="NO"}
-: ${chess_server_account:="chess"}
-: ${chess_server_binary:="/usr/local/chess/chess-server"}
-: ${chess_server_logfile:="/var/log/chess/chess-server.log"}
-
-pidfile="/var/run/${name}.pid"
-procname="daemon"
-command="/usr/sbin/daemon"
-command_args="-f -r -R 5 -H -P ${pidfile} -o ${chess_server_logfile} -u ${chess_server_account} ${chess_server_binary} ${chess_server_flags}"
-
-run_rc_command "$1"

deploy/freebsd/rc.d/chessd

@@ -0,0 +1,128 @@
+#!/bin/sh
+#
+# PROVIDE: chessd
+# REQUIRE: DAEMON NETWORKING postgresql
+# KEYWORD: shutdown
+#
+# chessd_enable:           Set to YES to enable chessd on startup.
+# chessd_user:             User to run as. Default: chess
+# chessd_group:            Group to run as. Default: chess
+# chessd_home:             Account home. Default: /home/chess
+# chessd_bin:              Server binary. Default: ${chessd_home}/bin/chess-server
+# chessd_logs:             Log file path. Default: /var/log/chessd.log
+# chessd_host:             Listen address. Default: 0.0.0.0
+# chessd_port:             Listen port. Default: 8080
+# chessd_dsn:              PostgreSQL connection. Default: postgres:///chess?host=/tmp
+#                          (database chess over the Unix socket, as the OS user)
+# chessd_jwt_key:          JWT signing key, created on first start (mode 0600).
+#                          Default: ${chessd_home}/jwt.key
+# chessd_trusted_proxies:  Reverse-proxy address(es) whose X-Real-IP header is
+#                          trusted as the client address. Default: none
+# chessd_flags:            Additional flags passed to the binary. Default: ""
+#
+# Add the following to /etc/rc.conf to enable:
+#   chessd_enable="YES"
+#   chessd_trusted_proxies="<address nginx connects from>"
+
+. /etc/rc.subr
+
+name="chessd"
+rcvar="chessd_enable"
+desc="Chess Server Daemon"
+
+load_rc_config "$name"
+
+: ${chessd_enable:="NO"}
+: ${chessd_user:="chess"}
+: ${chessd_group:="chess"}
+: ${chessd_home:="/home/chess"}
+: ${chessd_bin:="${chessd_home}/bin/chess-server"}
+: ${chessd_logs:="/var/log/chessd.log"}
+: ${chessd_host:="0.0.0.0"}
+: ${chessd_port:="8080"}
+: ${chessd_dsn:="postgres:///chess?host=/tmp"}
+: ${chessd_jwt_key:="${chessd_home}/jwt.key"}
+: ${chessd_trusted_proxies:=""}
+: ${chessd_flags:=""}
+
+command="${chessd_bin}"
+pidfile="/var/run/${name}.pid"
+
+start_precmd="${name}_prestart"
+start_cmd="${name}_start"
+stop_cmd="${name}_stop"
+status_cmd="${name}_status"
+
+chessd_prestart()
+{
+    if [ ! -x "${command}" ]; then
+        err 1 "${command} is missing or not executable"
+    fi
+
+    touch "${chessd_logs}"
+    chown "${chessd_user}:${chessd_group}" "${chessd_logs}"
+    chmod 640 "${chessd_logs}"
+
+    # A stable signing key keeps sessions valid across restarts. The server
+    # refuses a key readable by group or others.
+    if [ ! -f "${chessd_jwt_key}" ]; then
+        (umask 077 && /usr/bin/openssl rand -base64 48 > "${chessd_jwt_key}") ||
+            err 1 "cannot create ${chessd_jwt_key}"
+        chown "${chessd_user}:${chessd_group}" "${chessd_jwt_key}"
+        echo "Created JWT signing key ${chessd_jwt_key}."
+    fi
+}
+
+chessd_start()
+{
+    if chessd_status >/dev/null 2>&1; then
+        echo "${desc} is already running as PID $(cat ${pidfile})."
+        return 0
+    fi
+
+    set -- -api-host "${chessd_host}" -api-port "${chessd_port}" \
+        -dsn "${chessd_dsn}" -jwt-secret-file "${chessd_jwt_key}"
+    if [ -n "${chessd_trusted_proxies}" ]; then
+        set -- "$@" -trusted-proxies "${chessd_trusted_proxies}"
+    fi
+
+    echo "Starting ${desc}."
+    # -r restarts the server 5 seconds after an unexpected exit (for example
+    # when PostgreSQL is not yet accepting connections); -H reopens the log
+    # file on SIGHUP so newsyslog can rotate it.
+    /usr/sbin/daemon \
+        -P "${pidfile}" \
+        -r -R 5 \
+        -H \
+        -u "${chessd_user}" \
+        -o "${chessd_logs}" \
+        -f \
+        /usr/bin/env \
+            HOME="${chessd_home}" \
+            PATH="${chessd_home}/bin:/usr/local/bin:/usr/bin:/bin" \
+            "${command}" "$@" ${chessd_flags}
+}
+
+chessd_stop()
+{
+    if [ -f "${pidfile}" ]; then
+        echo "Stopping ${desc}."
+        kill -TERM "$(cat ${pidfile})" 2>/dev/null
+        wait_for_pids "$(cat ${pidfile})"
+        rm -f "${pidfile}"
+    else
+        echo "${desc} is not running (no pidfile)."
+    fi
+}
+
+chessd_status()
+{
+    if [ -f "${pidfile}" ] && kill -0 "$(cat ${pidfile})" 2>/dev/null; then
+        echo "${desc} is running as PID $(cat ${pidfile})."
+    else
+        echo "${desc} is not running."
+        return 1
+    fi
+}
+
+run_rc_command "$1"