ASPBlogBrainOrdure/ci/deploy-aspblogbrainordure-test.ps1

# deploy-aspblogbrainordure-test.ps1
# Polls Gitea for new commits on master; deploys ASPBlogBrainOrdure to test site if changed
# Scheduled Task: ASPBlogBrainOrdure-Test-Deploy (every 5 minutes)

$GITEA    = "https://onefortheroadgit.sytes.net"
$REPO     = "dcovington/ASPBlogBrainOrdure"
$TOKEN    = "bac7c4befba3f0428e8786020cddb5e9595a6838"
$WEBROOT  = "C:\inetpub\wwwroot\aspblogbrainordure-test"
$APPPOOL  = "aspblogbrainordure-test"
$STATEFILE = "C:\Scripts\.aspblog-last-commit"
$LOGFILE  = "C:\Scripts\aspblog-deploy.log"

function Log($msg) {
    $ts = (Get-Date).ToString("yyyy-MM-dd HH:mm:ss")
    "$ts $msg" | Out-File -Append -FilePath $LOGFILE
    Write-Host "$ts $msg"
}

# SSL bypass for self-signed cert
Add-Type -TypeDefinition "using System.Net; using System.Security.Cryptography.X509Certificates; public class TrustAll : ICertificatePolicy { public bool CheckValidationResult(ServicePoint sp, X509Certificate cert, WebRequest req, int problem) { return true; } }"
[System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAll
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.SecurityProtocolType]::Tls12

Log "Checking for new commits on $REPO master..."

# Get current master commit hash
try {
    $headers = @{ "Authorization" = "token $TOKEN" }
    $branchUrl = "$GITEA/api/v1/repos/$REPO/branches/master"
    $resp = Invoke-WebRequest -Uri $branchUrl -Headers $headers -UseBasicParsing
    $branch = $resp.Content | ConvertFrom-Json
    $latestCommit = $branch.commit.id
} catch {
    Log "ERROR fetching branch info: $_"
    exit 1
}

# Compare with last deployed commit
$lastCommit = ""
if (Test-Path $STATEFILE) { $lastCommit = (Get-Content $STATEFILE -Raw).Trim() }

if ($latestCommit -eq $lastCommit) {
    Log "No changes (commit $($latestCommit.Substring(0,8))). Nothing to do."
    exit 0
}

Log "New commit detected: $($latestCommit.Substring(0,8)). Deploying..."

# Download archive
$archiveUrl = "$GITEA/api/v1/repos/$REPO/archive/master.zip"
$zipPath = "C:\Scripts\aspblog-deploy.zip"
try {
    $wc = New-Object System.Net.WebClient
    $wc.Headers.Add("Authorization", "token $TOKEN")
    $wc.DownloadFile($archiveUrl, $zipPath)
    Log "Downloaded archive."
} catch {
    Log "ERROR downloading archive: $_"
    exit 1
}

# Extract to temp folder
$tmpDir = "C:\Scripts\aspblog-tmp"
if (Test-Path $tmpDir) { Remove-Item $tmpDir -Recurse -Force }
New-Item -ItemType Directory -Path $tmpDir | Out-Null
Add-Type -AssemblyName System.IO.Compression.FileSystem
[System.IO.Compression.ZipFile]::ExtractToDirectory($zipPath, $tmpDir)

# Find the extracted subfolder (Gitea puts files in a subfolder)
$extracted = Get-ChildItem $tmpDir -Directory | Select-Object -First 1
if (-not $extracted) { Log "ERROR: No directory found in archive."; exit 1 }
$srcPath = $extracted.FullName

Log "Extracted to $srcPath"

# Deploy structure mirrors the repo layout:
#   IIS serves from $WEBROOT\public\  (Default.asp lives here)
#   core\, app\, db\ go alongside public\ so ../core/ includes resolve correctly

$publicDst = Join-Path $WEBROOT "public"
New-Item -ItemType Directory -Force -Path $publicDst | Out-Null

foreach ($folder in @("public", "core", "app")) {
    $folderSrc = Join-Path $srcPath $folder
    $folderDst = Join-Path $WEBROOT $folder
    if (Test-Path $folderSrc) {
        if (Test-Path $folderDst) { Remove-Item $folderDst -Recurse -Force }
        Copy-Item $folderSrc $WEBROOT -Recurse -Force
        Log "Copied $folder/."
    }
}

# Only update db/ if webdata.accdb doesn't exist yet (preserve live data)
$dbSrc = Join-Path $srcPath "db"
$dbDst = Join-Path $WEBROOT "db"
if (Test-Path $dbSrc) {
    if (-not (Test-Path "$dbDst\webdata.accdb")) {
        if (Test-Path $dbDst) { Remove-Item $dbDst -Recurse -Force }
        Copy-Item $dbSrc $WEBROOT -Recurse -Force
        Log "Copied db/ (first deploy)."
    } else {
        # Only copy migration files, not the live database
        $migSrc = Join-Path $dbSrc "migrations"
        if (Test-Path $migSrc) {
            Copy-Item "$migSrc\*" "$dbDst\migrations\" -Recurse -Force
            Log "Updated db/migrations/."
        }
    }
}

# Update web.config ConnectionString to point to correct DB path
$webConfigPath = Join-Path $publicDst "web.config"
if (Test-Path $webConfigPath) {
    $wc = [System.IO.File]::ReadAllText($webConfigPath)
    $newConn = "Provider=Microsoft.ACE.OLEDB.12.0;Data Source=$WEBROOT\db\webdata.accdb;Persist Security Info=False;"
    $wc = [regex]::Replace($wc, 'Provider=Microsoft\.ACE\.OLEDB[^"]+', $newConn)
    if ($wc -notmatch 'enableParentPaths') {
        $wc = $wc -replace '<system.webServer>', '<system.webServer><asp enableParentPaths="true" />'
    }
    [System.IO.File]::WriteAllText($webConfigPath, $wc)
    Log "Updated web.config."
}

# Grant IIS_IUSRS write access to db folder
$dbPath = Join-Path $WEBROOT "db"
New-Item -ItemType Directory -Force -Path $dbPath | Out-Null
if (Test-Path $dbPath) {
    $acl = Get-Acl $dbPath
    $rule = New-Object System.Security.AccessControl.FileSystemAccessRule("IIS_IUSRS", "Modify", "ContainerInherit,ObjectInherit", "None", "Allow")
    $acl.SetAccessRule($rule)
    Set-Acl $dbPath $acl
    Log "Set IIS_IUSRS Modify on db folder."
}

# Recycle app pool
Import-Module WebAdministration -ErrorAction SilentlyContinue
try {
    Restart-WebAppPool $APPPOOL
    Log "Recycled app pool $APPPOOL."
} catch {
    Log "WARNING: Could not recycle app pool: $_"
}

# Cleanup
Remove-Item $tmpDir -Recurse -Force
Remove-Item $zipPath -Force

# Save new commit hash
$latestCommit | Out-File -FilePath $STATEFILE -NoNewline
Log "Deploy complete. Commit: $($latestCommit.Substring(0,8))"