SysOps: deploy-all — 2026-06-09 10:41 UTC

scripts/sysops_daily.py

@@ -0,0 +1,99 @@
+#!/usr/bin/env python3
+"""SysOps daily — approval requests for update scan + Gitea backup (no auto-scan)."""
+from __future__ import annotations
+
+import json
+import sys
+import urllib.request
+from datetime import datetime, timezone
+
+COCKPIT_URL = "http://127.0.0.1:8600"
+
+
+def _post(url: str, payload: dict | None = None, timeout: int = 60) -> dict:
+    data = json.dumps(payload or {}).encode("utf-8")
+    req = urllib.request.Request(
+        url,
+        data=data,
+        headers={"Content-Type": "application/json"},
+        method="POST",
+    )
+    with urllib.request.urlopen(req, timeout=timeout) as resp:
+        return json.loads(resp.read().decode("utf-8"))
+
+
+def _get(url: str, timeout: int = 30) -> dict:
+    with urllib.request.urlopen(url, timeout=timeout) as resp:
+        return json.loads(resp.read().decode("utf-8"))
+
+
+def _already_pending(action_type: str) -> bool:
+    try:
+        data = _get(f"{COCKPIT_URL}/api/agents/approvals?status=pending&limit=50")
+        return any(
+            i.get("agent_key") == "sysops" and i.get("action_type") == action_type
+            for i in (data.get("items") or [])
+        )
+    except Exception:
+        return False
+
+
+def main() -> int:
+    today = datetime.now(timezone.utc).strftime("%Y-%m-%d")
+    results: dict = {"date": today, "steps": []}
+
+    if not _already_pending("maintenance_scan"):
+        try:
+            scan_req = _post(
+                f"{COCKPIT_URL}/api/agents/requests",
+                {
+                    "agent_key": "sysops",
+                    "action_type": "maintenance_scan",
+                    "title": f"Mag ik een update-scan uitvoeren op VM106? — {today}",
+                    "query_payload": {
+                        "scope": "vm106",
+                        "checks": ["apt upgrades", "disk usage", "docker health", "proxmox reachability"],
+                        "host": "10.4.7.18",
+                    },
+                },
+            )
+            results["steps"].append({"maintenance_scan_request": scan_req})
+            print("Maintenance scan approval request:", (scan_req.get("request") or {}).get("id"))
+        except Exception as exc:
+            results["steps"].append({"maintenance_scan_error": str(exc)})
+            print("Maintenance scan request failed:", exc, file=sys.stderr)
+    else:
+        print("Maintenance scan request already pending — skipped")
+        results["steps"].append({"maintenance_scan_request": "already_pending"})
+
+    if not _already_pending("config_backup"):
+        try:
+            backup_req = _post(
+                f"{COCKPIT_URL}/api/agents/requests",
+                {
+                    "agent_key": "sysops",
+                    "action_type": "config_backup",
+                    "title": f"Dagelijkse config backup naar Gitea — {today}",
+                    "query_payload": {
+                        "target": "gitea",
+                        "repo": "aissa/foodlinkk-command-center",
+                        "paths": ["docker-compose.yml", "migrations", "monitoring"],
+                    },
+                },
+            )
+            results["steps"].append({"backup_request": backup_req})
+            print("Backup approval request:", (backup_req.get("request") or {}).get("id"))
+        except Exception as exc:
+            results["steps"].append({"backup_error": str(exc)})
+            print("Backup request failed:", exc, file=sys.stderr)
+            return 1
+    else:
+        print("Backup request already pending — skipped")
+        results["steps"].append({"backup_request": "already_pending"})
+
+    print(json.dumps(results, indent=2))
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())