Initial Ladill Hosting app with Gitea deploy pipeline.

Shared web hosting extracted from the platform monolith, with CI deploy to /var/www/ladill-hosting matching Bird/Domains/Email. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-06 16:24:20 +00:00
commit e251a4cf60
367 changed files with 66268 additions and 0 deletions
@@ -0,0 +1,120 @@
+<?php
+
+namespace App\Jobs;
+
+use App\Models\Domain;
+use App\Models\DomainNsCheck;
+use App\Services\Domain\DomainDkimService;
+use App\Services\Mail\MailServerProvisioner;
+use Illuminate\Bus\Queueable;
+use Illuminate\Contracts\Queue\ShouldQueue;
+use Illuminate\Foundation\Bus\Dispatchable;
+use Illuminate\Queue\InteractsWithQueue;
+use Illuminate\Queue\SerializesModels;
+use Illuminate\Support\Facades\Log;
+
+class MailProvisioningJob implements ShouldQueue
+{
+    use Dispatchable, InteractsWithQueue, Queueable, SerializesModels;
+
+    public int $tries = 3;
+    public int $backoff = 60;
+
+    public function __construct(public int $domainId)
+    {
+    }
+
+    public function handle(MailServerProvisioner $provisioner, DomainDkimService $dkim): void
+    {
+        $domain = Domain::query()->with('mailboxes')->find($this->domainId);
+        if (! $domain) {
+            return;
+        }
+
+        if (! $domain->isActiveForMail()) {
+            return;
+        }
+
+        if (! $provisioner->isConfigured()) {
+            Log::info('MailProvisioningJob: Skipped — mail server DB not configured', ['domain_id' => $domain->id]);
+            return;
+        }
+
+        $key = $dkim->ensureActive($domain);
+
+        $beforeStatus = (string) $domain->status;
+        $beforeState = (string) ($domain->onboarding_state ?? '');
+
+        try {
+            // 1. Provision domain in Postfix/Dovecot DB
+            $provisioner->provisionDomain($domain);
+
+            // 2. Provision each mailbox in Postfix/Dovecot DB
+            foreach ($domain->mailboxes as $mailbox) {
+                try {
+                    $provisioner->provisionMailbox($mailbox);
+                } catch (\Throwable $e) {
+                    Log::warning('MailProvisioningJob: Mailbox provision skipped (may need password)', [
+                        'email' => $mailbox->address,
+                        'error' => $e->getMessage(),
+                    ]);
+                }
+            }
+
+            // 3. Deploy DKIM key to mail server
+            $provisioner->deployDkim($domain, $key);
+
+            $this->markReady($domain);
+            $afterStatus = (string) $domain->status;
+            $afterState = (string) ($domain->onboarding_state ?? '');
+            $this->logCheck($domain, 'success', 'Mail stack provisioned via direct DB', [], $beforeStatus, $beforeState, $afterStatus, $afterState);
+        } catch (\Throwable $exception) {
+            $this->markFailed($domain);
+            $afterStatus = (string) $domain->status;
+            $afterState = (string) ($domain->onboarding_state ?? '');
+            $this->logCheck($domain, 'failed', $exception->getMessage(), [], $beforeStatus, $beforeState, $afterStatus, $afterState);
+            Log::error('Mail provisioning failed', ['domain_id' => $domain->id, 'error' => $exception->getMessage()]);
+            throw $exception;
+        }
+    }
+
+    private function markReady(Domain $domain): void
+    {
+        $domain->update([
+            'mail_ready_at' => $domain->mail_ready_at ?? now(),
+            'active_at' => $domain->active_at ?? now(),
+            'status' => 'verified',
+            'onboarding_state' => Domain::STATE_ACTIVE,
+        ]);
+    }
+
+    private function markFailed(Domain $domain): void
+    {
+        $domain->update([
+            'status' => 'verifying',
+            'onboarding_state' => Domain::STATE_MAIL_READY,
+        ]);
+    }
+
+    private function logCheck(Domain $domain, string $result, string $notes, array $payload = []): void
+    {
+        $stateBefore = $stateAfter = (string) ($domain->onboarding_state ?? '');
+        $statusBefore = $statusAfter = (string) $domain->status;
+
+        if (! empty($payload)) {
+            $notes .= ' '.json_encode($payload);
+        }
+
+        DomainNsCheck::create([
+            'domain_id' => $domain->id,
+            'check_type' => 'mail_provision',
+            'result' => $result,
+            'notes' => $notes.(! empty($payload) ? ' '.json_encode($payload) : ''),
+            'status_before' => $statusBefore,
+            'status_after' => $statusAfter,
+            'state_before' => $stateBefore,
+            'state_after' => $stateAfter,
+            'checked_at' => now(),
+        ]);
+    }
+}