ligbox/ligbox-ops-platform
3
0
Fork 0
Code Issues 421 Pull requests Projects Releases Packages Wiki Activity Actions
ligbox-ops-platform/specs/037-dns-multi-cloudflare-orchestration/deploy/DNS-VIEWER-ROLLBACK.md
Ligbox Spec Hub 038fb8f7ce feat(dns): Spec 037 DNS Viewer — Desk, Console e patches Wizard V4 
Entrega read-only de apontamentos DNS (Cloudflare, OpenPanel BIND, público)
no Desk e Console /admin/dominio, com spec, scripts de rollback e patches
VM112 para painel lateral no passo DNS do onboarding (deploy wizard pendente).

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-25 16:36:25 +00:00

225 lines
6.8 KiB
Markdown
Raw Blame History

# DNS Viewer — Rollback (Spec 037-DNS-VIEWER)
**Data:** 2026-06-25
**Spec:** 037 · **Exec:** DNS-VIEWER-V1-20260625
**Ambiente:** VM122 Desk · VM112 Wizard · VM123 Console (fases V3+) · CT130 Spec Hub
---
## O que muda por fase
| Fase | VM | Alteração | Rollback isolado? |
|------|-----|-----------|-------------------|
| **V0** (baseline) | VM122 | `cloudflare_dns.py` + modal CF em `app.js` | — baseline actual |
| **V1** | VM122 | `dns_viewer.py` + `GET /api/v1/dns/viewer/{domain}` | ✅ feature flag |
| **V1b** | VM122 | `dns-viewer.js` + UI unificada Desk | ✅ frontend only |
| **V2** | VM122 | `openpanel_dns.py` + provider BIND | ✅ desactivar provider |
| **V3** | VM123 | `/admin/dominio` consome viewer API | ✅ frontend Console |
| **V4** | VM112 | `GET /api/onboarding/dns/viewer/{domain}` | ✅ wizard only |
**Nunca alterado pelo DNS Viewer:** CT114 Traefik, pfSense, `/etc/network/interfaces` Proxmox, zonas Cloudflare reais, OpenPanel BIND dados.
---
## Feature flag (rollback sem redeploy completo)
Variável no `.env` VM122 (`/opt/ligbox-ops-platform/.env`):
```bash
# 1 = endpoint + UI novo; 0 = só legado CF
DNS_VIEWER_ENABLED=1
```
Com `DNS_VIEWER_ENABLED=0`:
- `GET /api/v1/dns/viewer/{domain}` → **404** ou redirect interno para legado
- Desk UI usa **`fetchCloudflareDns`** + `htmlCloudflareDnsCard` (V0)
- Endpoint legado **`GET /api/v1/dns/cloudflare/records`** mantém-se **sempre** activo até cutover final
Reinício rápido:
```bash
ssh root@10.10.10.122
cd /opt/ligbox-ops-platform
sed -i 's/^DNS_VIEWER_ENABLED=.*/DNS_VIEWER_ENABLED=0/' .env
docker compose -f docker-compose.mvp.yml up -d api frontend
```
---
## Pré-requisitos rollback — verificar backups
Backups criados **antes** de cada deploy (script `preflight-dns-viewer.sh`):
```bash
ssh root@10.10.10.122
ls -la /opt/ligbox-ops-platform/.backups/dns-viewer-*
docker images | grep -E 'ops-platform|ligbox-ops'
```
Git CT130:
```bash
ssh root@10.10.10.130
cd /opt/ligbox-spec-hub/repos/ligbox-ops-platform
git log --oneline -5
git tag -l 'dns-viewer-*'
```
---
## Rollback rápido — só frontend Desk (V1b)
Quando a API está OK mas a UI partiu (SyntaxError, modal vazio, «Carregando…» infinito):
```bash
ssh root@10.10.10.122
cd /opt/ligbox-ops-platform
BACKUP=$(ls -td .backups/dns-viewer-*/frontend/assets 2>/dev/null | head -1)
if [ -n "$BACKUP" ]; then
rm -rf frontend/assets/app.js frontend/assets/dns-viewer.js 2>/dev/null
cp -a "$BACKUP"/. frontend/assets/
fi
docker compose -f docker-compose.mvp.yml build --no-cache frontend
docker compose -f docker-compose.mvp.yml up -d frontend
curl -sS -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8091/
```
**Cache browser:** incrementar `app.js?v=` em `frontend/index.html` no backup ou manualmente.
---
## Rollback rápido — API Desk (V1)
Quando `/dns/viewer` devolve 500 ou bloqueia Overview:
```bash
ssh root@10.10.10.122
cd /opt/ligbox-ops-platform
BACKUP=$(ls -td .backups/dns-viewer-*/api/app 2>/dev/null | head -1)
if [ -n "$BACKUP" ]; then
cp -a "$BACKUP"/cloudflare_dns.py api/app/ 2>/dev/null || true
rm -f api/app/dns_viewer.py api/app/openpanel_dns.py
# Restaurar main.py do tarball se existir
if [ -f "$BACKUP/../main.py.bak" ]; then
cp -a "$BACKUP/../main.py.bak" api/app/main.py
fi
fi
grep -q DNS_VIEWER_ENABLED=0 .env || echo 'DNS_VIEWER_ENABLED=0' >> .env
docker compose -f docker-compose.mvp.yml build --no-cache api
docker compose -f docker-compose.mvp.yml up -d api
curl -sS -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8080/health
```
Validar legado:
```bash
# Com token JWT staff — ou curl interno documentado em verify-dns-viewer.sh
curl -sS 'http://127.0.0.1:8080/api/v1/dns/cloudflare/records?domain=ligbox.com.br' \
-H "Authorization: Bearer $TOKEN" | head -c 200
```
---
## Rollback imagem Docker (VM122)
```bash
ssh root@10.10.10.122
cd /opt/ligbox-ops-platform
docker tag ligbox-ops-platform-api:pre-dns-viewer-YYYYMMDD ligbox-ops-platform-api:latest
docker compose -f docker-compose.mvp.yml up -d api
```
Substituir `YYYYMMDD` pela data do backup em `docker images`.
---
## Rollback VM112 Wizard (V4 apenas)
```bash
ssh root@10.10.10.112
cd /opt/ligbox-wizard
BACKUP=$(ls -td .backups/dns-viewer-* 2>/dev/null | head -1)
if [ -n "$BACKUP" ]; then
cp -a "$BACKUP"/backend/. backend/
fi
systemctl restart ligbox-wizard 2>/dev/null || docker compose restart backend
curl -sS -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8090/health
```
Passo DNS wizard volta ao comportamento pré-viewer; **provision-zone / apply não são revertidos** (só UI/API leitura).
---
## Rollback VM123 Console `/admin/dominio` (V3 apenas)
```bash
ssh root@10.10.10.123
cd /opt/ligbox-ops-console
BACKUP=$(ls -td frontend.bak-dns-viewer-* 2>/dev/null | head -1)
if [ -n "$BACKUP" ]; then
rm -rf frontend
cp -a "$BACKUP" frontend
fi
docker compose build --no-cache && docker compose up -d
curl -sS -o /dev/null -w '%{http_code}\n' http://127.0.0.1:8100/health
```
Rota `/admin/dominio` pode mostrar placeholder ou 404 — **não afecta** Desk nem wizard apply.
---
## Rollback código (CT130 / monorepo)
```bash
cd /opt/ligbox-spec-hub/repos/ligbox-ops-platform
git log --oneline --grep='dns-viewer' -5
git revert <commit-dns-viewer> --no-edit
# ou checkout tag pré-deploy:
git checkout dns-viewer-pre-v1-YYYYMMDD -- projects/ops-desk/
./portal/refresh-spec-driver.sh 2>/dev/null || true
rsync -a specs/037-dns-multi-cloudflare-orchestration/ \
/opt/ligbox-spec-hub/obsidian-vault/ligbox-ops-platform/specs/037-dns-multi-cloudflare-orchestration/ 2>/dev/null || true
```
Re-deploy VM122 após revert git (rsync ou pull no host).
---
## Sintomas → acção
| Sintoma | Causa provável | Acção |
|---------|----------------|-------|
| Desk «Carregando…» em todo o site | SyntaxError em `app.js` | Rollback frontend V1b |
| Modal domínio sem DNS | API 500 viewer | `DNS_VIEWER_ENABLED=0` + rollback API |
| Overview OK, viewer vazio | CF token / zona | **Não rollback** — corrigir env; legado igual |
| 403 no viewer | RBAC | Ajustar role, não rollback |
| Wizard passo DNS partido | V4 VM112 | Rollback wizard only |
| Console `/admin/dominio` branco | V3 VM123 | Rollback Console frontend |
---
## Validação pós-rollback
```bash
# VM122 — script completo
bash specs/037-dns-multi-cloudflare-orchestration/deploy/scripts/verify-dns-viewer.sh \
--host 10.10.10.122 --legacy-only
```
Esperado:
- `GET /health` → 200
- `GET /api/v1/dns/cloudflare/records?domain=...` → 200 ou 403 (auth)
- Desk Overview abre modal domínio sem erro consola browser
- **Nenhuma** zona Cloudflare alterada (viewer é read-only)
---
## Referências
- Exec deploy: [DNS-VIEWER-EXEC-20260625.md](./DNS-VIEWER-EXEC-20260625.md)
- Preflight backup: [scripts/preflight-dns-viewer.sh](./scripts/preflight-dns-viewer.sh)
- Spec: [dns-viewer.md](../dns-viewer.md)
- Console v2 rollback (padrão): `specs/019-.../deploy/CONSOLE-V2-ROLLBACK.md`
Reference in a new issue View git blame Copy permalink