From 58f7917662ff92a3712289acccff8310c8f1baff Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Tue, 30 Jun 2026 22:29:07 +0900
Subject: Add strongSwan IKEv2 VPN service
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh
- install.sh: Caddy 証明書流用 + コンテナ起動
- renew-cert.sh: 証明書更新 + swanctl ホットリロード
- caddy/Caddyfile: vpn.yyamashita.com 追加（Let's Encrypt 証明書取得用）
- post-receive: vpn/deploy.sh を追加
- setup-route53.py: WEB_SUBDOMAINS に vpn を追加

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 vpn/deploy.sh | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 vpn/deploy.sh

(limited to 'vpn/deploy.sh')

diff --git a/vpn/deploy.sh b/vpn/deploy.sh
new file mode 100644
index 0000000..0005d9a
--- /dev/null
+++ b/vpn/deploy.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")"
+
+# 初期化前はスキップ（install.sh を先に実行する必要がある）
+if [ ! -f users.conf ] || [ ! -f certs/server.crt ]; then
+    echo "VPN: 未初期化のためスキップ (install.sh を実行してください)"
+    exit 0
+fi
+
+docker compose up -d --build
-- 
cgit v1.2.3