fix idempotency in app.sh, service.sh and nginx reload in cert handler

scripts/deploy.sh

@@ -23,13 +23,14 @@ server {
 }
 NGINXCONF
 
-    trap 'git -C /opt/hantim restore "docker/nginx/conf.d/$APP.conf" 2>/dev/null || rm -f "/opt/hantim/docker/nginx/conf.d/$APP.conf"' EXIT
+    trap 'git -C /opt/hantim restore "docker/nginx/conf.d/$APP.conf" 2>/dev/null || rm -f "/opt/hantim/docker/nginx/conf.d/$APP.conf"; docker exec nginx nginx -t && docker exec nginx nginx -s reload' EXIT
     docker exec nginx nginx -t && docker exec nginx nginx -s reload
     certbot certonly --webroot -w /opt/hantim/docker/nginx/certbot/www \
         --non-interactive --agree-tos -m timothykim@fastmail.fm \
         --cert-name "$APP" -d "$APP" -d "www.$APP"
     git -C /opt/hantim restore "docker/nginx/conf.d/$APP.conf" 2>/dev/null || rm -f "/opt/hantim/docker/nginx/conf.d/$APP.conf"
     trap - EXIT
+    docker exec nginx nginx -t && docker exec nginx nginx -s reload
     echo "Certificate issued for $APP"
     exit 0
 fi

tools/app.sh

@@ -253,13 +253,19 @@ cmd_repo() {
 }
 
 cmd_files() {
+    local all_exist=true
     for f in "docker/$APP/compose.yml" ".gitea/workflows/deploy-$APP.yml" "docker/nginx/conf.d/$APP.conf"; do
-        if [ -e "$REPO_ROOT/$f" ]; then
-            echo "Error: $f already exists."
-            exit 1
+        if [ ! -e "$REPO_ROOT/$f" ]; then
+            all_exist=false
+            break
         fi
     done
+    if [ "$all_exist" = true ]; then
+        echo "  All files already exist, skipping."
+        return
+    fi
 
+    if [ ! -e "$REPO_ROOT/docker/$APP/compose.yml" ]; then
         echo "==> Creating docker/$APP/compose.yml..."
         mkdir -p "$REPO_ROOT/docker/$APP"
         cat > "$REPO_ROOT/docker/$APP/compose.yml" <<EOF
@@ -275,7 +281,11 @@ networks:
   shared:
     external: true
 EOF
+    else
+        echo "  docker/$APP/compose.yml already exists, skipping."
+    fi
 
+    if [ ! -e "$REPO_ROOT/.gitea/workflows/deploy-$APP.yml" ]; then
         echo "==> Creating .gitea/workflows/deploy-$APP.yml..."
         mkdir -p "$REPO_ROOT/.gitea/workflows"
         cat > "$REPO_ROOT/.gitea/workflows/deploy-$APP.yml" <<'OUTER'
@@ -300,7 +310,11 @@ jobs:
           ssh -o StrictHostKeyChecking=yes -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-APP_PLACEHOLDER
 OUTER
         sed -i "s/APP_PLACEHOLDER/$APP/g" "$REPO_ROOT/.gitea/workflows/deploy-$APP.yml"
+    else
+        echo "  .gitea/workflows/deploy-$APP.yml already exists, skipping."
+    fi
 
+    if [ ! -e "$REPO_ROOT/docker/nginx/conf.d/$APP.conf" ]; then
         echo "==> Creating docker/nginx/conf.d/$APP.conf..."
         cat > "$REPO_ROOT/docker/nginx/conf.d/$APP.conf" <<NGINX
 # Redirect HTTP to HTTPS, bare domain to www
@@ -357,8 +371,9 @@ server {
     }
 }
 NGINX
-
-    echo "  Files created. Run 'git add' and commit when ready."
+    else
+        echo "  docker/nginx/conf.d/$APP.conf already exists, skipping."
+    fi
 }
 
 cmd_cert() {

tools/service.sh

@@ -156,11 +156,19 @@ cmd_dns() {
 cmd_files() {
     local name="$1"
 
-    if [ -d "$REPO_ROOT/docker/$name" ]; then
-        echo "Error: docker/$name already exists."
-        exit 1
+    local all_exist=true
+    for f in "docker/$name/compose.yml" ".gitea/workflows/deploy-$name.yml"; do
+        if [ ! -e "$REPO_ROOT/$f" ]; then
+            all_exist=false
+            break
+        fi
+    done
+    if [ "$all_exist" = true ]; then
+        echo "  All files already exist, skipping."
+        return
     fi
 
+    if [ ! -e "$REPO_ROOT/docker/$name/compose.yml" ]; then
         echo "==> Creating docker/$name/compose.yml..."
         mkdir -p "$REPO_ROOT/docker/$name"
         touch "$REPO_ROOT/docker/$name/.gitignore"
@@ -177,7 +185,11 @@ networks:
   shared:
     external: true
 EOF
+    else
+        echo "  docker/$name/compose.yml already exists, skipping."
+    fi
 
+    if [ ! -e "$REPO_ROOT/.gitea/workflows/deploy-$name.yml" ]; then
         echo "==> Creating .gitea/workflows/deploy-$name.yml..."
         mkdir -p "$REPO_ROOT/.gitea/workflows"
         cat > "$REPO_ROOT/.gitea/workflows/deploy-$name.yml" <<'OUTER'
@@ -202,6 +214,9 @@ jobs:
           ssh -o StrictHostKeyChecking=yes -i ~/.ssh/deploy_key deploy@${{ vars.DEPLOY_HOST }} deploy-APP_PLACEHOLDER
 OUTER
         sed -i "s/APP_PLACEHOLDER/$name/g" "$REPO_ROOT/.gitea/workflows/deploy-$name.yml"
+    else
+        echo "  .gitea/workflows/deploy-$name.yml already exists, skipping."
+    fi
 
     echo ""
     echo "Done. Edit docker/$name/compose.yml, then commit and push."