gcloud setting

Dockerfile

@@ -0,0 +1,26 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# 安裝系統依賴
+RUN apt-get update && apt-get install -y \
+    ffmpeg \
+    && rm -rf /var/lib/apt/lists/*
+
+# 複製應用程式檔案
+COPY requirements.txt .
+COPY *.py .
+COPY *.json ./
+
+# 安裝 Python 依賴
+RUN pip install --no-cache-dir -r requirements.txt
+
+# 設定環境變數
+ENV PORT=8080
+ENV IS_ENV_LOCAL=false
+
+# 暴露連接埠
+EXPOSE 8080
+
+# 啟動應用程式
+CMD exec python app.py 

Makefile

@@ -0,0 +1,75 @@
+# 從 local_config.json 讀取配置
+PROJECT_ID := $(shell jq -r '.PROJECT_ID // "ai-square-463013"' local_config.json)
+SERVICE_NAME := $(shell jq -r '.SERVICE_NAME // "vaitor2"' local_config.json)
+
+# 檢查必要的環境變數
+check-config:
+	@test -f local_config.json || (echo "錯誤：需要 local_config.json 文件" && exit 1)
+
+# 專案相關變數
+REGION := asia-east1
+IMAGE_NAME := gcr.io/$(PROJECT_ID)/$(SERVICE_NAME)
+
+# 確保有登入 gcloud
+.PHONY: auth
+auth: check-config
+	gcloud auth login
+	gcloud config set project $(PROJECT_ID)
+	gcloud auth configure-docker
+
+# 上傳 secrets 到 Secret Manager
+.PHONY: secrets
+secrets: check-config
+	gcloud services enable secretmanager.googleapis.com
+	./upload_secrets.sh
+
+# 建立並推送 Docker image
+.PHONY: docker
+docker: check-config
+	docker build -t $(IMAGE_NAME) .
+	docker push $(IMAGE_NAME)
+
+# 部署到 Cloud Run
+.PHONY: deploy
+deploy: check-config
+	gcloud run deploy $(SERVICE_NAME) \
+		--image $(IMAGE_NAME) \
+		--platform managed \
+		--region $(REGION) \
+		--allow-unauthenticated \
+		--memory 2Gi \
+		--cpu 2 \
+		--port=8080 \
+		--set-secrets="\
+PASSWORD=$(SERVICE_NAME)-PASSWORD:latest,\
+OPEN_AI_KEY=$(SERVICE_NAME)-OPEN_AI_KEY:latest,\
+OPEN_AI_ASSISTANT_ID_GPT4_BOT1=$(SERVICE_NAME)-OPEN_AI_ASSISTANT_ID_GPT4_BOT1:latest,\
+OPEN_AI_ASSISTANT_ID_GPT3_BOT1=$(SERVICE_NAME)-OPEN_AI_ASSISTANT_ID_GPT3_BOT1:latest,\
+OPEN_AI_MODERATION_BOT1=$(SERVICE_NAME)-OPEN_AI_MODERATION_BOT1:latest,\
+GROQ_API_KEY=$(SERVICE_NAME)-GROQ_API_KEY:latest,\
+JUTOR_CHAT_KEY=$(SERVICE_NAME)-JUTOR_CHAT_KEY:latest,\
+PERPLEXITY_API_KEY=$(SERVICE_NAME)-PERPLEXITY_API_KEY:latest,\
+GOOGLE_APPLICATION_CREDENTIALS_JSON=$(SERVICE_NAME)-GOOGLE_APPLICATION_CREDENTIALS_JSON:latest"
+
+# 一次執行所有步驟
+.PHONY: all
+all: auth secrets docker deploy
+
+# 只更新 Docker image 和部署（不處理 secrets）
+.PHONY: update
+update: docker deploy
+
+# 顯示說明
+.PHONY: help
+help:
+	@echo "可用的指令："
+	@echo "  make auth    - 登入 Google Cloud"
+	@echo "  make secrets - 上傳 secrets 到 Secret Manager"
+	@echo "  make docker  - 建立並推送 Docker image"
+	@echo "  make deploy  - 部署到 Cloud Run"
+	@echo "  make all     - 執行所有步驟（auth + secrets + docker + deploy）"
+	@echo "  make update  - 只更新 Docker image 和部署"
+	@echo ""
+	@echo "注意：請確保 local_config.json 中有以下設定："
+	@echo "  PROJECT_ID: \"$(PROJECT_ID)\""
+	@echo "  SERVICE_NAME: \"$(SERVICE_NAME)\"" 

local_config_example.json

@@ -1,4 +1,6 @@
 {
+  "PROJECT_ID": "xx-xxxx-xxx",
+  "SERVICE_NAME": "xxx",
   "OUTPUT_PATH": "/Users/young/Downloads",
   "TRANSCRIPTS": [],
   "CURRENT_INDEX": 0,

upload_secrets.sh

@@ -0,0 +1,65 @@
+#!/bin/bash
+
+# 1. 讀取 local_config.json
+CONFIG_FILE="local_config.json"
+PREFIX="vaitor2"
+
+# 不使用 TMP_DIR，直接在專案根目錄產生暫存檔
+
+echo "開始處理 secrets 上傳..."
+
+# 2. 需要處理的 key
+KEYS=(
+  PASSWORD
+  OPEN_AI_KEY
+  OPEN_AI_ASSISTANT_ID_GPT4_BOT1
+  OPEN_AI_ASSISTANT_ID_GPT3_BOT1
+  OPEN_AI_MODERATION_BOT1
+  GROQ_API_KEY
+  JUTOR_CHAT_KEY
+  PERPLEXITY_API_KEY
+  GOOGLE_APPLICATION_CREDENTIALS_JSON
+)
+
+# 3. 逐一處理每個 key
+for KEY in "${KEYS[@]}"; do
+  echo "\n==== 處理 $KEY ===="
+  FILENAME="${KEY}.txt"
+  VALUE=$(jq -c --raw-output ".${KEY}" "$CONFIG_FILE")
+
+  # 如果是 null 就跳過
+  if [[ "$VALUE" == "null" ]]; then
+    echo "Skip $KEY (null)"
+    continue
+  fi
+
+  # 如果是物件（GOOGLE_APPLICATION_CREDENTIALS_JSON），直接存成 JSON
+  if [[ "$KEY" == "GOOGLE_APPLICATION_CREDENTIALS_JSON" ]]; then
+    echo "$VALUE" > "$FILENAME"
+    echo "已將 $KEY 內容存成 JSON 檔 $FILENAME"
+  else
+    echo -n "$VALUE" > "$FILENAME"
+    echo "已將 $KEY 內容存成文字檔 $FILENAME"
+  fi
+
+  set -x
+  # 建立 secret（如果已存在會失敗，請自行決定是否要先刪除舊的）
+  echo "嘗試建立 secret: ${PREFIX}-${KEY}..."
+  gcloud secrets create "${PREFIX}-${KEY}" --data-file="$FILENAME" 2>/dev/null
+
+  # 如果已存在就更新
+  if [[ $? -ne 0 ]]; then
+    echo "Secret ${PREFIX}-${KEY} 已存在，改為 add new version..."
+    gcloud secrets versions add "${PREFIX}-${KEY}" --data-file="$FILENAME"
+    echo "已為 ${PREFIX}-${KEY} 新增版本"
+  else
+    echo "Secret ${PREFIX}-${KEY} 已建立"
+  fi
+  set +x
+
+  # 刪除暫存檔
+  rm "$FILENAME"
+  echo "$FILENAME 已刪除"
+done
+
+echo "\n所有 secrets 已處理完畢！"