ante-erp-cli 1.11.49 → 1.11.50

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ante-erp-cli",
-  "version": "1.11.49",
+  "version": "1.11.50",
   "description": "Comprehensive CLI tool for managing ANTE ERP self-hosted installations",
   "type": "module",
   "bin": {

package/src/commands/install.js

@@ -15,6 +15,7 @@ import { generateDockerCompose } from '../templates/docker-compose.yml.js';
 import { generateEnv } from '../templates/env.js';
 import { detectPublicIPWithFeedback, buildURL } from '../utils/network.js';
 import { configureNginx, requiresNginx } from '../utils/nginx.js';
+import { applySysctlSettings } from '../utils/system-config.js';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
@@ -302,6 +303,10 @@ export async function install(options) {
       }
 
       console.log(chalk.green(`✓ ${formatStepTitle(stepSystemCheck, totalSteps, 'System requirements met')}\n`));
+
+      // Configure system kernel parameters for Redis
+      console.log(chalk.cyan('  Configuring system kernel parameters...'));
+      await applySysctlSettings();
     }
 
     // Step: Network detection

package/src/commands/update.js

@@ -9,6 +9,7 @@ import { backup } from './backup.js';
 import { getCurrentVersion, getLatestVersion } from './update-cli.js';
 import { generateDockerCompose } from '../templates/docker-compose.yml.js';
 import { generateSecurePassword } from '../utils/password.js';
+import { verifySysctlSettings, applySysctlSettings } from '../utils/system-config.js';
 
 /**
  * Check if gate-app, guardian-app, facial-web, or pos-app is installed by checking docker-compose.yml
@@ -461,6 +462,16 @@ export async function update(options) {
       refreshDockerCompose(composeFile, envFile);
     }
 
+    // Verify and apply sysctl settings if needed (for Redis optimization)
+    console.log(chalk.gray('Verifying system kernel parameters...'));
+    const sysctlCheck = await verifySysctlSettings();
+    if (!sysctlCheck.ok) {
+      console.log(chalk.yellow('  Reapplying system kernel parameters...'));
+      await applySysctlSettings();
+    } else {
+      console.log(chalk.gray('  System kernel parameters OK'));
+    }
+
     // Pre-calculate step numbers for each task (fixes step numbering bug)
     let currentStep = 0;
     const stepPreStart = !options.skipBackup ? ++currentStep : null;

package/src/templates/docker-compose.yml.js

@@ -42,7 +42,7 @@ services:
     networks:
       - ante-network
     healthcheck:
-      test: ["CMD-SHELL", "pg_isready -U ante"]
+      test: ["CMD-SHELL", "pg_isready -U ante -d ante_db"]
       interval: 10s
       timeout: 5s
       retries: 5

package/src/utils/system-config.js

@@ -0,0 +1,130 @@
+import { execa } from 'execa';
+import { writeFileSync } from 'fs';
+import chalk from 'chalk';
+
+const SYSCTL_CONFIG_FILE = '/etc/sysctl.d/ante-redis.conf';
+
+/**
+ * Required sysctl settings for optimal Redis performance
+ * vm.overcommit_memory=1 prevents Redis background save failures under low memory
+ */
+const REQUIRED_SETTINGS = {
+  'vm.overcommit_memory': '1'
+};
+
+/**
+ * Check if a sysctl setting is currently applied
+ * @param {string} key - The sysctl key (e.g., 'vm.overcommit_memory')
+ * @returns {Promise<string|null>} Current value or null if error
+ */
+export async function checkSysctlSetting(key) {
+  try {
+    const { stdout } = await execa('sysctl', ['-n', key]);
+    return stdout.trim();
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Apply a sysctl setting immediately
+ * @param {string} key - The sysctl key
+ * @param {string} value - The value to set
+ * @returns {Promise<boolean>} Success status
+ */
+export async function applySysctlSetting(key, value) {
+  try {
+    await execa('sudo', ['sysctl', '-w', `${key}=${value}`], { stdio: 'pipe' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Persist sysctl settings to config file for reboot survival
+ * @returns {Promise<boolean>} Success status
+ */
+export async function persistSysctlSettings() {
+  const lines = Object.entries(REQUIRED_SETTINGS)
+    .map(([key, value]) => `${key}=${value}`)
+    .join('\n');
+
+  const content = `# ANTE ERP Redis Optimization
+# Generated by ante-erp-cli
+# See: https://redis.io/docs/getting-started/faq/#background-saving-fails-with-a-fork-error-on-linux
+${lines}
+`;
+
+  try {
+    // Write to temp file then move with sudo
+    const tempFile = '/tmp/ante-sysctl.conf';
+    writeFileSync(tempFile, content);
+    await execa('sudo', ['mv', tempFile, SYSCTL_CONFIG_FILE], { stdio: 'pipe' });
+    await execa('sudo', ['chmod', '644', SYSCTL_CONFIG_FILE], { stdio: 'pipe' });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * Apply and persist all required sysctl settings
+ * @param {boolean} silent - Suppress console output
+ * @returns {Promise<{applied: string[], failed: string[], skipped: string[]}>}
+ */
+export async function applySysctlSettings(silent = false) {
+  const results = { applied: [], failed: [], skipped: [] };
+
+  for (const [key, value] of Object.entries(REQUIRED_SETTINGS)) {
+    const current = await checkSysctlSetting(key);
+
+    if (current === value) {
+      results.skipped.push(key);
+      continue;
+    }
+
+    const success = await applySysctlSetting(key, value);
+    if (success) {
+      results.applied.push(key);
+    } else {
+      results.failed.push(key);
+    }
+  }
+
+  // Persist to config file for reboot survival
+  if (results.applied.length > 0) {
+    await persistSysctlSettings();
+  }
+
+  if (!silent) {
+    if (results.applied.length > 0) {
+      console.log(chalk.green(`  ✓ Applied sysctl settings: ${results.applied.join(', ')}`));
+    }
+    if (results.skipped.length > 0) {
+      console.log(chalk.gray(`    Sysctl settings already configured: ${results.skipped.join(', ')}`));
+    }
+    if (results.failed.length > 0) {
+      console.log(chalk.yellow(`  ⚠ Failed to apply: ${results.failed.join(', ')} (may require root privileges)`));
+    }
+  }
+
+  return results;
+}
+
+/**
+ * Verify sysctl settings are applied (for update command)
+ * @returns {Promise<{ok: boolean, missing: Array<{key: string, expected: string, current: string|null}>}>}
+ */
+export async function verifySysctlSettings() {
+  const missing = [];
+
+  for (const [key, value] of Object.entries(REQUIRED_SETTINGS)) {
+    const current = await checkSysctlSetting(key);
+    if (current !== value) {
+      missing.push({ key, expected: value, current });
+    }
+  }
+
+  return { ok: missing.length === 0, missing };
+}