feat: import Chinese-localized Buzz source snapshot

Signed-off-by: cls_宁波本机 <908705107@qq.com>

deploy/compose/run.sh

@@ -0,0 +1,191 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+cd "${SCRIPT_DIR}"
+
+COMPOSE_FILES=(-f compose.yml)
+if [[ "${BUZZ_COMPOSE_TLS:-false}" == "true" ]]; then
+  COMPOSE_FILES+=(-f compose.caddy.yml)
+fi
+if [[ "${BUZZ_COMPOSE_DEV:-false}" == "true" ]]; then
+  COMPOSE_FILES+=(-f compose.dev.yml)
+fi
+
+WEB_OVERLAY_ENABLED=false
+if [[ "${BUZZ_WEB_HOST_DIR+x}" == "x" ]] || {
+  [[ -f .env ]] && grep -Eq '^[[:space:]]*(export[[:space:]]+)?BUZZ_WEB_HOST_DIR[[:space:]]*=' .env
+}; then
+  COMPOSE_FILES+=(-f compose.web.yml)
+  WEB_OVERLAY_ENABLED=true
+fi
+
+compose() {
+  docker compose --env-file .env "${COMPOSE_FILES[@]}" "$@"
+}
+
+require_env() {
+  if [[ ! -f .env ]]; then
+    cat >&2 <<'MSG'
+Missing deploy/compose/.env.
+
+Copy .env.example to .env and replace every CHANGE_ME value, or run the bootstrap
+script once it lands. Do not start production with generated secrets missing.
+MSG
+    exit 1
+  fi
+  if grep -Eq '^[[:space:]]*[A-Za-z_][A-Za-z0-9_]*=.*CHANGE_ME' .env; then
+    cat >&2 <<'MSG'
+deploy/compose/.env still contains CHANGE_ME placeholders.
+Generate stable secrets first; these values must not rotate on restart.
+MSG
+    exit 1
+  fi
+}
+
+read_web_host_dir() {
+  if [[ "${BUZZ_WEB_HOST_DIR+x}" == "x" ]]; then
+    printf '%s' "${BUZZ_WEB_HOST_DIR}"
+    return
+  fi
+
+  local value
+  value="$({
+    sed -nE 's/^[[:space:]]*(export[[:space:]]+)?BUZZ_WEB_HOST_DIR[[:space:]]*=[[:space:]]*(.*)$/\2/p' .env || true
+  } | tail -n 1)"
+  value="${value%$'\r'}"
+  value="${value#\"}"
+  value="${value%\"}"
+  value="${value#\'}"
+  value="${value%\'}"
+  printf '%s' "${value}"
+}
+
+validate_web_overlay() {
+  [[ "${WEB_OVERLAY_ENABLED}" == "true" ]] || return 0
+
+  local host_dir
+  host_dir="$(read_web_host_dir)"
+  if [[ -z "${host_dir}" ]]; then
+    echo "BUZZ_WEB_HOST_DIR is set but empty." >&2
+    exit 1
+  fi
+  if [[ "${host_dir}" != /* ]]; then
+    echo "BUZZ_WEB_HOST_DIR must be an absolute path." >&2
+    exit 1
+  fi
+  if [[ ! -d "${host_dir}" ]]; then
+    echo "BUZZ_WEB_HOST_DIR does not exist or is not a directory: ${host_dir}" >&2
+    exit 1
+  fi
+  if [[ ! -r "${host_dir}/index.html" ]]; then
+    echo "BUZZ_WEB_HOST_DIR must contain a readable index.html: ${host_dir}" >&2
+    exit 1
+  fi
+}
+
+validate_config() {
+  require_env
+  validate_web_overlay
+  # Quiet mode validates the merged model without printing resolved secrets.
+  compose config --quiet
+}
+
+backup_hint() {
+  cat <<'MSG'
+Back up these before upgrades and on a regular schedule:
+
+- deploy/compose/.env, especially BUZZ_RELAY_PRIVATE_KEY, DB/Redis/S3 secrets, and BUZZ_GIT_HOOK_HMAC_SECRET
+- The owner private key if bootstrap generated one for RELAY_OWNER_PUBKEY
+- Postgres data (prefer pg_dump or a quiesced volume snapshot)
+- MinIO/S3 bucket contents for media and git objects
+- buzz-git-data volume (BUZZ_GIT_REPO_PATH=/data/git)
+- Caddy data/config volumes if using compose.caddy.yml
+
+Keep Postgres + object/git state snapshots from the same maintenance window.
+MSG
+}
+
+case "${1:-help}" in
+  start|up)
+    validate_config
+    compose up -d --wait
+    ;;
+  stop|down)
+    compose down
+    ;;
+  restart)
+    validate_config
+    compose up -d --wait --force-recreate relay
+    ;;
+  pull)
+    validate_config
+    compose pull
+    ;;
+  upgrade)
+    validate_config
+    compose pull
+    compose up -d --wait
+    backup_hint
+    ;;
+  logs)
+    shift || true
+    compose logs -f "${@:-relay}"
+    ;;
+  status|ps)
+    compose ps
+    ;;
+  config|validate)
+    validate_config
+    echo "Compose configuration is valid."
+    ;;
+  backup-hint)
+    backup_hint
+    ;;
+  add-member)
+    docker compose exec relay /usr/local/bin/buzz-admin add-member --pubkey "${2:?Usage: ./run.sh add-member <npub-or-hex> [--role member|admin]}" "${@:3}"
+    ;;
+  remove-member)
+    docker compose exec relay /usr/local/bin/buzz-admin remove-member --pubkey "${2:?Usage: ./run.sh remove-member <npub-or-hex> [--role member|admin]}" "${@:3}"
+    ;;
+  list-members)
+    docker compose exec relay /usr/local/bin/buzz-admin list-members
+    ;;
+  help|-h|--help)
+    cat <<'MSG'
+Usage: ./run.sh <command>
+
+Commands:
+  start         Start Buzz with docker compose up -d --wait
+  stop          Stop containers without deleting volumes
+  restart       Recreate the relay after env/image changes
+  pull          Pull configured images
+  upgrade       Pull and restart, then print backup reminders
+  logs [svc]    Follow logs (default: relay)
+  status        Show compose service status
+  config        Validate merged Compose config without printing secrets
+  validate      Alias for config
+  backup-hint   Print the production backup checklist
+
+  add-member <npub-or-hex> [--role member|admin]
+                Add a relay member (default role: member)
+  remove-member <npub-or-hex> [--role member|admin]
+                Remove a relay member
+  list-members  List all relay members
+
+  Note: when adding multiple members in a loop, add `sleep 1` between
+  invocations to avoid same-second timestamp collisions in the kind:13534
+  roster event. Do not use parallel adds (e.g. xargs -P).
+
+Environment switches:
+  BUZZ_COMPOSE_TLS=true   Include compose.caddy.yml for automatic HTTPS
+  BUZZ_COMPOSE_DEV=true   Include compose.dev.yml for local admin ports/tools
+  BUZZ_WEB_HOST_DIR=/abs  Mount a custom web dist via compose.web.yml (read-only)
+MSG
+    ;;
+  *)
+    echo "Unknown command: $1" >&2
+    echo "Run ./run.sh help" >&2
+    exit 1
+    ;;
+esac