chore: check web domain

base/api/deployment.yaml

@@ -20,6 +20,7 @@ spec:
       labels:
         app: api
     spec:
+      terminationGracePeriodSeconds: 30
       serviceAccountName: server-creator
       dnsConfig:
         options:

base/api/ingress.yaml

@@ -4,8 +4,8 @@ metadata:
   name: api
   namespace: 5stack
   annotations:
-    nginx.ingress.kubernetes.io/proxy-body-size: "4G"
-    nginx.ingress.kubernetes.io/client-max-body-size: "4G"
+    nginx.ingress.kubernetes.io/proxy-body-size: "500M"
+    nginx.ingress.kubernetes.io/client-max-body-size: "500M"
 spec:
   ingressClassName: nginx
   rules:

base/game-server-node-connector/daemonset.yaml

@@ -6,6 +6,10 @@ metadata:
   name: game-server-node-connector
   namespace: 5stack
 spec:
+  updateStrategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxUnavailable: 1
   selector:
     matchLabels:
       app: game-server-node-connector
@@ -14,6 +18,7 @@ spec:
       labels:
         app: game-server-node-connector
     spec:
+      terminationGracePeriodSeconds: 30
       dnsConfig:
         options:
           - name: ndots

base/hasura/deployment.yaml

@@ -20,6 +20,7 @@ spec:
       labels:
         app: hasura
     spec:
+      terminationGracePeriodSeconds: 30
       dnsConfig:
         options:
           - name: ndots

base/redis/configmap.yaml

@@ -5,9 +5,9 @@ metadata:
   namespace: 5stack
 data:
   redis.conf: |
+    # Persistence strategy: hybrid RDB snapshots + AOF for durability.
+    # RDB provides point-in-time snapshots; AOF provides write-level durability.
     tcp-keepalive 240
-    appendonly no
-    save ""
     maxmemory-policy noeviction
     user default on >${REDIS_PASSWORD} allcommands allkeys +@all &*
     io-threads-do-reads yes

install.sh

@@ -1,4 +1,5 @@
 #!/bin/bash
+set -euo pipefail
 
 source setup-env.sh "$@"
 check_sudo
@@ -17,7 +18,10 @@ mkdir -p /opt/5stack/custom-plugins
 echo "Environment files setup complete"
 
 echo "Installing K3s"
-curl -sfL https://get.k3s.io | sh -s - --disable=traefik
+if ! curl -sfL https://get.k3s.io | sh -s - --disable=traefik; then
+  echo "ERROR: K3s installation failed"
+  exit 1
+fi
 
 cat <<-'SCRIPT' >/usr/local/bin/5stack-cpu-state-check.sh
 	#!/bin/bash
@@ -46,7 +50,12 @@ systemctl daemon-reload
 echo "Installing Ingress Nginx, this may take a few minutes..."
 install_ingress_nginx true
 
-kubectl label node $(kubectl get nodes -o jsonpath='{.items[0].metadata.name}') 5stack-api=true 5stack-hasura=true 5stack-minio=true 5stack-timescaledb=true 5stack-redis=true 5stack-typesense=true 5stack-web=true
+NODE_NAME=$(kubectl get nodes -o jsonpath='{.items[0].metadata.name}')
+if [ -z "$NODE_NAME" ]; then
+  echo "ERROR: Could not determine node name"
+  exit 1
+fi
+kubectl label node "$NODE_NAME" 5stack-api=true 5stack-hasura=true 5stack-minio=true 5stack-timescaledb=true 5stack-redis=true 5stack-typesense=true 5stack-web=true
 
 source update.sh "$@"
 

setup-env.sh

@@ -204,6 +204,11 @@ if [ -z "$WEB_DOMAIN" ] || [ -z "$WS_DOMAIN" ] || [ -z "$API_DOMAIN" ] || [ -z "
         echo "Base domain cannot be empty. Please enter your base domain (e.g. example.com):"
         read WEB_DOMAIN
     fi
+
+    if [ -z "$WEB_DOMAIN" ] || echo "$WEB_DOMAIN" | grep -q ' '; then
+        echo "ERROR: Invalid domain '$WEB_DOMAIN'. Domain must be non-empty and contain no spaces."
+        exit 1
+    fi
 
     echo "WEB_DOMAIN: $WEB_DOMAIN"
     update_env_var "overlays/config/api-config.env" "WEB_DOMAIN" "$WEB_DOMAIN"