From 389bd02af7b4df75993403d9509b5666afad0228 Mon Sep 17 00:00:00 2001
From: server <server@jakubkadlec.dev>
Date: Tue, 14 Apr 2026 08:49:32 +0200
Subject: [PATCH] deploy: add login healthcheck wrapper

---
 deploy/healthcheck/README.md                  |  14 +++
 deploy/healthcheck/metin-login-healthcheck.sh | 114 ++++++++++++++++++
 2 files changed, 128 insertions(+)
 create mode 100644 deploy/healthcheck/README.md
 create mode 100755 deploy/healthcheck/metin-login-healthcheck.sh

diff --git a/deploy/healthcheck/README.md b/deploy/healthcheck/README.md
new file mode 100644
index 0000000..e84393c
--- /dev/null
+++ b/deploy/healthcheck/README.md
@@ -0,0 +1,14 @@
+`metin-login-healthcheck.sh` is a root-only operational check for the Debian VPS.
+
+What it does:
+- creates a temporary account in MariaDB
+- runs `metin_login_smoke` against auth and channel ports
+- verifies `AUTH_SUCCESS`, `EMPIRE`, and `LOGIN_SUCCESS4`
+- deletes the temporary account on exit
+
+Default paths and ports are tuned for the current VPS layout. Override with env vars if needed:
+- `RUN_AS_USER`
+- `SERVER_HOST`
+- `AUTH_PORT`
+- `CHANNEL_PORT`
+- `SMOKE_BIN`
diff --git a/deploy/healthcheck/metin-login-healthcheck.sh b/deploy/healthcheck/metin-login-healthcheck.sh
new file mode 100755
index 0000000..10051eb
--- /dev/null
+++ b/deploy/healthcheck/metin-login-healthcheck.sh
@@ -0,0 +1,114 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+umask 077
+
+if [[ "${EUID}" -ne 0 ]]; then
+  echo "Run as root." >&2
+  exit 1
+fi
+
+: "${RUN_AS_USER:=mt2.jakubkadlec.dev}"
+: "${SERVER_HOST:=173.249.9.66}"
+: "${AUTH_PORT:=11000}"
+: "${CHANNEL_PORT:=11011}"
+: "${SMOKE_BIN:=/home/${RUN_AS_USER}/metin/build/server-src/bin/metin_login_smoke}"
+
+if [[ ! -x "${SMOKE_BIN}" ]]; then
+  echo "Smoke binary not found: ${SMOKE_BIN}" >&2
+  exit 1
+fi
+
+if ! id "${RUN_AS_USER}" >/dev/null 2>&1; then
+  echo "Missing runtime user: ${RUN_AS_USER}" >&2
+  exit 1
+fi
+
+LOGIN="smkhc$(date +%s)"
+PASSWORD="$(openssl rand -hex 6)"
+SOCIAL_ID="$(date +%s%N | tail -c 14)"
+EMAIL="${LOGIN}@example.invalid"
+
+cleanup() {
+  mysql player >/dev/null 2>&1 <<SQL || true
+DELETE FROM player_index
+WHERE id IN (
+  SELECT id FROM account.account WHERE login='${LOGIN}'
+);
+SQL
+
+  mysql account >/dev/null 2>&1 <<SQL || true
+DELETE FROM account WHERE login='${LOGIN}';
+SQL
+}
+
+trap cleanup EXIT
+
+ACCOUNT_ID="$(
+  mysql -N account <<SQL
+INSERT INTO account (
+  login,
+  password,
+  social_id,
+  email,
+  create_time,
+  is_testor,
+  status,
+  newsletter,
+  empire,
+  name_checked,
+  availDt,
+  mileage,
+  cash,
+  gold_expire,
+  silver_expire,
+  safebox_expire,
+  autoloot_expire,
+  fish_mind_expire,
+  marriage_fast_expire,
+  money_drop_rate_expire,
+  total_cash,
+  total_mileage,
+  channel_company,
+  last_play
+) VALUES (
+  '${LOGIN}',
+  PASSWORD('${PASSWORD}'),
+  '${SOCIAL_ID}',
+  '${EMAIL}',
+  NOW(),
+  0,
+  'OK',
+  0,
+  1,
+  0,
+  '2001-01-01 00:00:00',
+  0,
+  0,
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  '0000-00-00 00:00:00',
+  0,
+  0,
+  '',
+  NOW()
+);
+SELECT LAST_INSERT_ID();
+SQL
+)"
+
+mysql player >/dev/null <<SQL
+INSERT INTO player_index (id, pid1, pid2, pid3, pid4, empire)
+VALUES (${ACCOUNT_ID}, 0, 0, 0, 0, 1);
+SQL
+
+echo "Running login healthcheck for temporary account ${LOGIN}"
+sudo -iu "${RUN_AS_USER}" env METIN_LOGIN_SMOKE_PASSWORD="${PASSWORD}" \
+  "${SMOKE_BIN}" "${SERVER_HOST}" "${AUTH_PORT}" "${CHANNEL_PORT}" "${LOGIN}" \
+  --password-env=METIN_LOGIN_SMOKE_PASSWORD
+
+echo "Login healthcheck passed"