Files
wecom_it_smart_desk/__deploy_artifacts_20260807/patch_nginx.py
T

50 lines
1.7 KiB
Python

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
"""Patch 生产 nginx.conf:新增 /h5/v20260807a/ 版本化 location + 将 /h5/go 302 指向它。
仅做确定性字符串替换,保持其他配置不变。"""
import sys
CONF = '/opt/wecom-it-desk/nginx/nginx.conf'
OLD_GO = '/h5/v20260806g/$is_args$args'
NEW_GO = '/h5/v20260807a/$is_args$args'
BLOCK = '''location /h5/v20260807a/ {
alias /usr/share/nginx/html/h5/;
index index.html;
try_files $uri /h5/v20260807a/index.html;
add_header Cache-Control "no-store" always;
add_header Strict-Transport-Security "max-age=31536000" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header Permissions-Policy "geolocation=(), microphone=(), camera=()" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
add_header X-Content-Type-Options "nosniff" always;
}
'''
with open(CONF, 'r', encoding='utf-8') as f:
s = f.read()
# 1) repoint /h5/go (all occurrences)
n_go = s.count(OLD_GO)
if n_go == 0:
print('WARN: old /h5/go target not found, skip replace')
else:
s = s.replace(OLD_GO, NEW_GO)
print('replaced /h5/go target occurrences:', n_go)
# 2) insert versioned block before each 'location /h5/ {'
marker = 'location /h5/ {'
if marker not in s:
print('ERROR: marker not found')
sys.exit(2)
segs = s.split(marker)
out = segs[0]
for seg in segs[1:]:
out += BLOCK + marker + seg
with open(CONF, 'w', encoding='utf-8') as f:
f.write(out)
print('inserted versioned block before', len(segs) - 1, 'occurrence(s) of', repr(marker))
print('new conf length:', len(out))