Autoupdate

Author: andreapollastri

README.md

@@ -15,7 +15,7 @@ One command installs a complete production stack. One command creates an isolate
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/version-4.0.0-blue" alt="Version">
+  <img src="https://img.shields.io/badge/dynamic/yaml?url=https%3A%2F%2Fraw.githubusercontent.com%2Fandreapollastri%2Fcipi%2Flatest%2Fversion.md&query=%24&label=version&color=blue" alt="Version">
   <img src="https://img.shields.io/badge/ubuntu-24.04+-orange" alt="Ubuntu">
   <img src="https://img.shields.io/badge/license-MIT-green" alt="License">
   <img src="https://img.shields.io/github/stars/andreapollastri/cipi?style=social" alt="Stars">
@@ -64,7 +64,7 @@ Installation takes about 10–15 minutes. At the end you'll see:
 
 ```
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-  CIPI v4.0.0 INSTALLED SUCCESSFULLY
+  CIPI vX.Y.Z INSTALLED SUCCESSFULLY
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
 
   MariaDB Root
@@ -596,7 +596,7 @@ The update process:
 4. Runs **migration scripts** if the new version requires system changes (e.g., new Nginx config directives, new packages)
 5. Updates the version file
 
-Migration scripts live in `lib/migrations/` and are named by version (e.g., `4.1.0.sh`). When updating from v4.0.0 to v4.2.0, Cipi automatically runs `4.1.0.sh` and `4.2.0.sh` in order. This means Cipi can evolve the server configuration over time without requiring a full reinstall.
+Migration scripts live in `lib/migrations/` and are named by version (e.g., `4.1.0.sh`). When updating, Cipi automatically runs any migration scripts newer than the installed version in order. This means Cipi can evolve the server configuration over time without requiring a full reinstall.
 
 **Your apps, databases, and configurations are never touched by updates.** Only Cipi's own scripts are replaced.
 

cipi

@@ -2,16 +2,16 @@
 
 #############################################
 # Cipi - Server Control Panel for Laravel
-# Version: 4.0.0
+# Version: see /etc/cipi/version
 # Author: Andrea Pollastri
 # License: MIT
 #############################################
 
 set -euo pipefail
 
-readonly CIPI_VERSION="4.0.0"
 readonly CIPI_LIB="/opt/cipi/lib"
 readonly CIPI_CONFIG="/etc/cipi"
+readonly CIPI_VERSION="$(tr -d '[:space:]' < "${CIPI_CONFIG}/version" 2>/dev/null || echo "unknown")"
 readonly CIPI_LOG="/var/log/cipi"
 
 RED=$'\033[0;31m'; GREEN=$'\033[0;32m'; YELLOW=$'\033[1;33m'

install.sh

@@ -2,16 +2,16 @@
 
 #############################################
 # Cipi Installer
-# Version: 4.0.0
+# Version: see version.md
 # Author: Andrea Pollastri
 # License: MIT
 #############################################
 
 set -e
 
-BUILD="4.0.0"
 REPO="andreapollastri/cipi"
 BRANCH="${1:-latest}"
+BUILD=""  # resolved from version.md after git clone in install_cipi()
 
 RED='\033[0;31m'
 GREEN='\033[0;32m'
@@ -521,6 +521,9 @@ install_cipi() {
     rm -rf cipi-install
     git clone -b "$BRANCH" --depth 1 "https://github.com/${REPO}.git" cipi-install 2>/dev/null
 
+    BUILD="$(tr -d '[:space:]' < /tmp/cipi-install/version.md 2>/dev/null)"
+    [[ -z "$BUILD" ]] && { echo "Cannot read version.md from repo"; exit 1; }
+
     # Main CLI
     cp cipi-install/cipi /usr/local/bin/cipi
     chmod 700 /usr/local/bin/cipi
@@ -599,6 +602,8 @@ AUEOF
 
     (crontab -l 2>/dev/null | grep -v "CIPI"; cat <<'CRONEOF'
 # === CIPI CRON JOBS ===
+# Cipi self-update (daily 3:50 AM)
+50 3 * * * /usr/local/bin/cipi self-update >> /var/log/cipi/cipi.log 2>&1
 # SSL renewal (Sunday 4 AM)
 10 4 * * 0 certbot renew --nginx --non-interactive --post-hook "systemctl reload nginx" >> /var/log/cipi/certbot.log 2>&1
 # Security updates — unattended-upgrades handles this daily via APT::Periodic

lib/self-update.sh

@@ -9,7 +9,7 @@ selfupdate_command() {
     parse_args "$@"
     local branch="${ARG_branch:-latest}"
     if [[ "${ARG_check:-}" == "true" ]]; then
-        local rv; rv=$(curl -s "https://raw.githubusercontent.com/${_CIPI_REPO}/refs/heads/${branch}/cipi" 2>/dev/null|grep 'CIPI_VERSION='|head -1|cut -d'"' -f2)
+        local rv; rv=$(curl -fsSL "https://raw.githubusercontent.com/${_CIPI_REPO}/refs/heads/${branch}/version.md" 2>/dev/null | tr -d '[:space:]')
         [[ -z "$rv" ]] && { error "Cannot check updates"; exit 1; }
         [[ "$rv" == "$CIPI_VERSION" ]] && success "Up to date (v${CIPI_VERSION})" || info "Update: v${CIPI_VERSION} → v${rv}"
         return
@@ -18,8 +18,8 @@ selfupdate_command() {
     step "Downloading from '${branch}'..."
     local tmp="/tmp/cipi-update-$$"; rm -rf "$tmp"
     git clone -b "$branch" --depth 1 "https://github.com/${_CIPI_REPO}.git" "$tmp" 2>/dev/null || { error "Download failed"; exit 1; }
-    local nv; nv=$(grep 'CIPI_VERSION=' "${tmp}/cipi"|head -1|cut -d'"' -f2)
-    [[ -z "$nv" ]] && { error "Invalid package"; rm -rf "$tmp"; exit 1; }
+    local nv; nv=$(tr -d '[:space:]' < "${tmp}/version.md" 2>/dev/null)
+    [[ -z "$nv" ]] && { error "Invalid package (version.md missing)"; rm -rf "$tmp"; exit 1; }
     info "Updating v${CIPI_VERSION} → v${nv}"
     cp -r /opt/cipi "/opt/cipi.bak.$(date +%Y%m%d%H%M%S)" 2>/dev/null||true
     cp "${tmp}/cipi" /usr/local/bin/cipi; chmod 700 /usr/local/bin/cipi

version.md

@@ -0,0 +1 @@
+4.0.0