#!/bin/bash
# setup_supabase_dev.sh
# Supabase開発環境の完全自動セットアップ

set -euo pipefail

# 設定変数
PROJECT_NAME="${1:-supabase-app}"
POSTGRES_PASSWORD="${2:-$(openssl rand -base64 32)}"
JWT_SECRET="${3:-$(openssl rand -base64 64)}"

echo "🚀 Supabase開発環境セットアップ開始"
echo "プロジェクト名: $PROJECT_NAME"

# 必要なツールのチェック
check_dependencies() {
    local deps=("docker" "docker-compose" "psql" "curl" "jq")
    for dep in "${deps[@]}"; do
        if ! command -v "$dep" &> /dev/null; then
            echo "❌ $dep がインストールされていません"
            exit 1
        fi
    done
    echo "✅ 依存関係チェック完了"
}

# プロジェクトディレクトリ作成
setup_project_structure() {
    mkdir -p "$PROJECT_NAME"/{supabase/{migrations,seed,functions,volumes/{db/{data,init},api}},apps/{flet-client,fastapi-server},scripts,docs}
    cd "$PROJECT_NAME"
    echo "✅ プロジェクト構造作成完了"
}

# 環境変数ファイル生成
create_env_files() {
    cat > .env << EOF
# Supabase設定
SUPABASE_URL=http://localhost:54321
SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
SUPABASE_SERVICE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU

# データベース設定
POSTGRES_HOST=localhost
POSTGRES_PORT=54322
POSTGRES_DB=postgres
POSTGRES_USER=postgres
POSTGRES_PASSWORD=$POSTGRES_PASSWORD

# JWT設定
JWT_SECRET=$JWT_SECRET

# API設定
API_PORT=8000
API_HOST=0.0.0.0

# 外部サービス（本番環境で設定）
STRIPE_SECRET_KEY=
STRIPE_WEBHOOK_SECRET=
SENDGRID_API_KEY=
SLACK_WEBHOOK_URL=
EOF

    # 本番用環境変数テンプレート
    cat > .env.production.template << EOF
# 本番環境用設定テンプレート
SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=your-anon-key
SUPABASE_SERVICE_KEY=your-service-key

POSTGRES_HOST=your-production-host
POSTGRES_PORT=5432
POSTGRES_DB=postgres
POSTGRES_USER=postgres
POSTGRES_PASSWORD=your-secure-password

JWT_SECRET=your-production-jwt-secret

# 外部サービス
STRIPE_SECRET_KEY=sk_live_...
STRIPE_WEBHOOK_SECRET=whsec_...
SENDGRID_API_KEY=SG....
SLACK_WEBHOOK_URL=https://hooks.slack.com/...
EOF

    echo "✅ 環境変数ファイル作成完了"
}

# Docker Compose設定生成
create_docker_compose() {
    cat > docker-compose.yml << 'EOF'
version: '3.8'

services:
  # PostgreSQL データベース
  supabase-db:
    image: supabase/postgres:15.1.0.117
    container_name: supabase-db
    environment:
      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
      POSTGRES_DB: postgres
    volumes:
      - ./supabase/volumes/db/data:/var/lib/postgresql/data
      - ./supabase/volumes/db/init:/docker-entrypoint-initdb.d
    ports:
      - "54322:5432"
    command: postgres -c wal_level=logical
    restart: unless-stopped

  # Supabase Studio（管理画面）
  supabase-studio:
    image: supabase/studio:20231123-fb9c70e
    container_name: supabase-studio
    environment:
      SUPABASE_URL: http://localhost:54321
      SUPABASE_ANON_KEY: ${SUPABASE_ANON_KEY}
      SUPABASE_SERVICE_KEY: ${SUPABASE_SERVICE_KEY}
    ports:
      - "3000:3000"
    depends_on:
      - supabase-kong
    restart: unless-stopped

  # Kong API Gateway
  supabase-kong:
    image: kong:2.8.1
    container_name: supabase-kong
    environment:
      KONG_DATABASE: "off"
      KONG_DECLARATIVE_CONFIG: /var/lib/kong/kong.yml
      KONG_DNS_ORDER: LAST,A,CNAME
      KONG_PLUGINS: request-transformer,cors,key-auth,acl
    volumes:
      - ./supabase/volumes/api/kong.yml:/var/lib/kong/kong.yml:ro
    ports:
      - "54321:8000"
      - "54323:8001"
    depends_on:
      - supabase-auth
      - supabase-rest
      - supabase-realtime
    restart: unless-stopped

  # Supabase Auth（認証サーバー）
  supabase-auth:
    image: supabase/gotrue:v2.99.0
    container_name: supabase-auth
    environment:
      GOTRUE_API_HOST: 0.0.0.0
      GOTRUE_API_PORT: 9999
      GOTRUE_DB_DRIVER: postgres
      GOTRUE_DB_DATABASE_URL: postgres://postgres:${POSTGRES_PASSWORD}@supabase-db:5432/postgres?search_path=auth
      GOTRUE_SITE_URL: http://localhost:3000
      GOTRUE_URI_ALLOW_LIST: http://localhost:3000,http://localhost:8000
      GOTRUE_JWT_SECRET: ${JWT_SECRET}
      GOTRUE_JWT_EXP: 3600
      GOTRUE_JWT_DEFAULT_GROUP_NAME: authenticated
      GOTRUE_JWT_ADMIN_GROUP_NAME: service_role
      GOTRUE_EXTERNAL_EMAIL_ENABLED: true
      GOTRUE_MAILER_AUTOCONFIRM: true
      GOTRUE_SMTP_HOST: 
      GOTRUE_SMTP_PORT: 587
      GOTRUE_SMTP_USER: 
      GOTRUE_SMTP_PASS: 
    depends_on:
      - supabase-db
    restart: unless-stopped

  # PostgREST（自動API生成）
  supabase-rest:
    image: postgrest/postgrest:v11.2.0
    container_name: supabase-rest
    environment:
      PGRST_DB_URI: postgres://postgres:${POSTGRES_PASSWORD}@supabase-db:5432/postgres
      PGRST_DB_SCHEMAS: public,storage,graphql_public
      PGRST_DB_ANON_ROLE: anon
      PGRST_JWT_SECRET: ${JWT_SECRET}
      PGRST_DB_USE_LEGACY_GUCS: "false"
    depends_on:
      - supabase-db
    restart: unless-stopped

  # Realtime（リアルタイム機能）
  supabase-realtime:
    image: supabase/realtime:v2.25.35
    container_name: supabase-realtime
    environment:
      PORT: 4000
      DB_HOST: supabase-db
      DB_PORT: 5432
      DB_USER: postgres
      DB_PASSWORD: ${POSTGRES_PASSWORD}
      DB_NAME: postgres
      DB_AFTER_CONNECT_QUERY: 'SET search_path TO _realtime'
      DB_ENC_KEY: supabaserealtime
      API_JWT_SECRET: ${JWT_SECRET}
      SECRET_KEY_BASE: UpNVntn3cDxHJpq99YMc1T1AQgQpc8kfYTuRgBiYa15BLrx8etQoXz3gZv1/u2oq
      ERL_AFLAGS: -proto_dist inet_tcp
      ENABLE_TAILSCALE: "false"
      DNS_NODES: "''"
    depends_on:
      - supabase-db
    command: >
      bash -c "
        /app/bin/migrate && 
        /app/bin/realtime eval 'Realtime.Release.seeds(Realtime.Repo)' && 
        /app/bin/server
      "
    restart: unless-stopped

  # Redis（キャッシュ・セッション）
  redis:
    image: redis:7-alpine
    container_name: supabase-redis
    ports:
      - "6379:6379"
    command: redis-server --appendonly yes
    volumes:
      - redis_data:/data
    restart: unless-stopped

volumes:
  redis_data:
EOF

    echo "✅ Docker Compose設定作成完了"
}

# Kong設定生成
create_kong_config() {
    mkdir -p supabase/volumes/api
    cat > supabase/volumes/api/kong.yml << 'EOF'
_format_version: "2.1"
_transform: true

consumers:
  - username: anon
    keyauth_credentials:
      - key: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
  - username: service_role
    keyauth_credentials:
      - key: eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU

acls:
  - consumer: anon
    group: anon
  - consumer: service_role
    group: service_role

services:
  - name: auth-v1-open
    url: http://supabase-auth:9999/
    routes:
      - name: auth-v1-open
        strip_path: true
        paths:
          - "/auth/v1/signup"
          - "/auth/v1/token"
          - "/auth/v1/verify"
          - "/auth/v1/recover"
          - "/auth/v1/settings"

  - name: auth-v1-open-verify
    url: http://supabase-auth:9999/verify
    routes:
      - name: auth-v1-open-verify
        strip_path: true
        paths:
          - "/auth/v1/verify"

  - name: auth-v1
    _comment: "GoTrue: /auth/v1/* -> http://supabase-auth:9999/*"
    url: http://supabase-auth:9999/
    routes:
      - name: auth-v1-all
        strip_path: true
        paths:
          - "/auth/v1/"
    plugins:
      - name: cors

  - name: rest-v1
    _comment: "PostgREST: /rest/v1/* -> http://supabase-rest:3000/*"
    url: http://supabase-rest:3000/
    routes:
      - name: rest-v1-all
        strip_path: true
        paths:
          - "/rest/v1/"
    plugins:
      - name: cors
      - name: key-auth
        config:
          hide_credentials: false

  - name: realtime-v1
    _comment: "Realtime: /realtime/v1/* -> ws://supabase-realtime:4000/socket/*"
    url: http://supabase-realtime:4000/socket/
    routes:
      - name: realtime-v1-all
        strip_path: true
        paths:
          - "/realtime/v1/"
    plugins:
      - name: cors
      - name: key-auth
        config:
          hide_credentials: false
EOF

    echo "✅ Kong設定作成完了"
}

# 初期マイグレーション作成
create_initial_migration() {
    cat > supabase/migrations/001_initial_schema.sql << 'EOF'
-- 初期スキーマ設定
-- 拡張機能有効化
CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
CREATE EXTENSION IF NOT EXISTS "pgcrypto";
CREATE EXTENSION IF NOT EXISTS "pg_stat_statements";

-- カスタム型定義
CREATE TYPE user_role AS ENUM ('admin', 'member', 'viewer');
CREATE TYPE task_priority AS ENUM ('low', 'medium', 'high', 'urgent');
CREATE TYPE task_status AS ENUM ('todo', 'in_progress', 'completed', 'cancelled');

-- プロファイルテーブル
CREATE TABLE profiles (
    id UUID REFERENCES auth.users(id) PRIMARY KEY,
    display_name TEXT,
    avatar_url TEXT,
    role user_role DEFAULT 'member',
    metadata JSONB DEFAULT '{}',
    created_at TIMESTAMPTZ DEFAULT NOW(),
    updated_at TIMESTAMPTZ DEFAULT NOW()
);

-- 組織テーブル
CREATE TABLE organizations (
    id BIGSERIAL PRIMARY KEY,
    name TEXT NOT NULL,
    slug TEXT UNIQUE NOT NULL,
    description TEXT,
    settings JSONB DEFAULT '{}',
    created_at TIMESTAMPTZ DEFAULT NOW(),
    updated_at TIMESTAMPTZ DEFAULT NOW()
);

-- 組織メンバーシップ
CREATE TABLE organization_members (
    id BIGSERIAL PRIMARY KEY,
    organization_id BIGINT REFERENCES organizations(id) ON DELETE CASCADE,
    user_id UUID REFERENCES auth.users(id) ON DELETE CASCADE,
    role user_role DEFAULT 'member',
    joined_at TIMESTAMPTZ DEFAULT NOW(),
    UNIQUE(organization_id, user_id)
);

-- プロジェクトテーブル
CREATE TABLE projects (
    id BIGSERIAL PRIMARY KEY,
    organization_id BIGINT REFERENCES organizations(id) ON DELETE CASCADE,
    name TEXT NOT NULL,
    description TEXT,
    status TEXT DEFAULT 'active',
    created_by UUID REFERENCES auth.users(id),
    created_at TIMESTAMPTZ DEFAULT NOW(),
    updated_at TIMESTAMPTZ DEFAULT NOW()
);

-- タスクテーブル
CREATE TABLE tasks (
    id BIGSERIAL PRIMARY KEY,
    project_id BIGINT REFERENCES projects(id) ON DELETE CASCADE,
    title TEXT NOT NULL,
    description TEXT,
    priority task_priority DEFAULT 'medium',
    status task_status DEFAULT 'todo',
    assignee_id UUID REFERENCES auth.users(id),
    due_date DATE,
    completed_at TIMESTAMPTZ,
    created_by UUID REFERENCES auth.users(id),
    created_at TIMESTAMPTZ DEFAULT NOW(),
    updated_at TIMESTAMPTZ DEFAULT NOW()
);

-- インデックス作成
CREATE INDEX idx_profiles_role ON profiles(role);
CREATE INDEX idx_organization_members_org_id ON organization_members(organization_id);
CREATE INDEX idx_organization_members_user_id ON organization_members(user_id);
CREATE INDEX idx_projects_organization_id ON projects(organization_id);
CREATE INDEX idx_projects_created_by ON projects(created_by);
CREATE INDEX idx_tasks_project_id ON tasks(project_id);
CREATE INDEX idx_tasks_assignee_id ON tasks(assignee_id);
CREATE INDEX idx_tasks_status ON tasks(status);
CREATE INDEX idx_tasks_due_date ON tasks(due_date) WHERE due_date IS NOT NULL;

-- RLS有効化
ALTER TABLE profiles ENABLE ROW LEVEL SECURITY;
ALTER TABLE organizations ENABLE ROW LEVEL SECURITY;
ALTER TABLE organization_members ENABLE ROW LEVEL SECURITY;
ALTER TABLE projects ENABLE ROW LEVEL SECURITY;
ALTER TABLE tasks ENABLE ROW LEVEL SECURITY;

-- プロファイルのRLSポリシー
CREATE POLICY "Users can view own profile" ON profiles
    FOR SELECT USING (auth.uid() = id);

CREATE POLICY "Users can update own profile" ON profiles
    FOR UPDATE USING (auth.uid() = id);

-- 組織のRLSポリシー
CREATE POLICY "Organization members can view" ON organizations
    FOR SELECT USING (
        EXISTS (
            SELECT 1 FROM organization_members 
            WHERE organization_id = organizations.id 
            AND user_id = auth.uid()
        )
    );

-- タスクのRLSポリシー
CREATE POLICY "Task visibility" ON tasks
    FOR SELECT USING (
        EXISTS (
            SELECT 1 FROM projects p
            JOIN organization_members om ON p.organization_id = om.organization_id
            WHERE p.id = tasks.project_id 
            AND om.user_id = auth.uid()
        )
    );

-- 更新日時の自動更新関数
CREATE OR REPLACE FUNCTION update_updated_at_column()
RETURNS TRIGGER AS $$
BEGIN
    NEW.updated_at = NOW();
    RETURN NEW;
END;
$$ LANGUAGE plpgsql;

-- 更新日時トリガー
CREATE TRIGGER update_profiles_updated_at 
    BEFORE UPDATE ON profiles 
    FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

CREATE TRIGGER update_organizations_updated_at 
    BEFORE UPDATE ON organizations 
    FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

CREATE TRIGGER update_projects_updated_at 
    BEFORE UPDATE ON projects 
    FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

CREATE TRIGGER update_tasks_updated_at 
    BEFORE UPDATE ON tasks 
    FOR EACH ROW EXECUTE FUNCTION update_updated_at_column();

-- プロファイル自動作成関数
CREATE OR REPLACE FUNCTION handle_new_user()
RETURNS TRIGGER AS $$
BEGIN
    INSERT INTO profiles (id, display_name)
    VALUES (NEW.id, NEW.email);
    RETURN NEW;
END;
$$ LANGUAGE plpgsql SECURITY DEFINER;

-- ユーザー作成時のトリガー
CREATE TRIGGER on_auth_user_created
    AFTER INSERT ON auth.users
    FOR EACH ROW EXECUTE FUNCTION handle_new_user();
EOF

    echo "✅ 初期マイグレーション作成完了"
}

# 開発用スクリプト生成
create_dev_scripts() {
    mkdir -p scripts

    # 起動スクリプト
    cat > scripts/start.sh << 'EOF'
#!/bin/bash
echo "🚀 Supabase開発環境起動中..."
docker-compose up -d

echo "⏳ サービス起動待機中..."
sleep 10

# ヘルスチェック
echo "🏥 ヘルスチェック実行中..."
curl -f http://localhost:54321/rest/v1/ > /dev/null 2>&1 && echo "✅ PostgREST: OK" || echo "❌ PostgREST: NG"
curl -f http://localhost:54321/auth/v1/settings > /dev/null 2>&1 && echo "✅ Auth: OK" || echo "❌ Auth: NG"
curl -f http://localhost:3000 > /dev/null 2>&1 && echo "✅ Studio: OK" || echo "❌ Studio: NG"

echo "🌟 Supabase開発環境が利用可能です"
echo "📊 Studio: http://localhost:3000"
echo "🔗 API: http://localhost:54321"
echo "💾 Database: localhost:54322"
EOF

    # 停止スクリプト
    cat > scripts/stop.sh << 'EOF'
#!/bin/bash
echo "🛑 Supabase開発環境停止中..."
docker-compose down
echo "✅ 停止完了"
EOF

    # リセットスクリプト
    cat > scripts/reset.sh << 'EOF'
#!/bin/bash
echo "🔄 Supabase開発環境リセット中..."
docker-compose down -v
docker-compose up -d
echo "✅ リセット完了"
EOF

    # バックアップスクリプト
    cat > scripts/backup.sh << 'EOF'
#!/bin/bash
BACKUP_DIR="backups/$(date +%Y%m%d_%H%M%S)"
mkdir -p "$BACKUP_DIR"

echo "💾 データベースバックアップ中..."
docker-compose exec -T supabase-db pg_dump -U postgres -d postgres > "$BACKUP_DIR/database.sql"

echo "📁 設定ファイルバックアップ中..."
cp -r supabase/migrations "$BACKUP_DIR/"
cp docker-compose.yml "$BACKUP_DIR/"
cp .env "$BACKUP_DIR/env.backup"

echo "✅ バックアップ完了: $BACKUP_DIR"
EOF

    chmod +x scripts/*.sh
    echo "✅ 開発スクリプト作成完了"
}

# メイン実行
main() {
    check_dependencies
    setup_project_structure
    create_env_files
    create_docker_compose
    create_kong_config
    create_initial_migration
    create_dev_scripts

    echo ""
    echo "🎉 Supabase開発環境セットアップ完了！"
    echo ""
    echo "次のステップ:"
    echo "1. cd $PROJECT_NAME"
    echo "2. ./scripts/start.sh"
    echo "3. http://localhost:3000 でStudioにアクセス"
    echo ""
    echo "パスワード: $POSTGRES_PASSWORD"
    echo "JWT Secret: $JWT_SECRET"
}

main "$@"

#!/bin/bash
# deploy_production.sh
# 本番環境への安全なデプロイ

set -euo pipefail

ENVIRONMENT="${1:-staging}"
VERSION="${2:-latest}"

echo "🚀 $ENVIRONMENT 環境へのデプロイ開始 (version: $VERSION)"

# 前提条件チェック
check_prerequisites() {
    local required_tools=("kubectl" "helm" "docker" "jq")
    for tool in "${required_tools[@]}"; do
        if ! command -v "$tool" &> /dev/null; then
            echo "❌ $tool が必要です"
            exit 1
        fi
    done

    # 環境変数チェック
    if [[ -z "${KUBECONFIG:-}" ]]; then
        echo "❌ KUBECONFIG が設定されていません"
        exit 1
    fi

    echo "✅ 前提条件チェック完了"
}

# イメージビルドとプッシュ
build_and_push_images() {
    echo "🔨 Docker イメージビルド中..."
    
    # FastAPI アプリケーション
    docker build -t "myapp/api:$VERSION" ./apps/fastapi-server/
    docker push "myapp/api:$VERSION"
    
    # Flet クライアント（必要に応じて）
    if [[ -f "./apps/flet-client/Dockerfile" ]]; then
        docker build -t "myapp/client:$VERSION" ./apps/flet-client/
        docker push "myapp/client:$VERSION"
    fi
    
    echo "✅ イメージプッシュ完了"
}

# データベースマイグレーション
run_migrations() {
    echo "📊 データベースマイグレーション実行中..."
    
    # Kubernetesジョブでマイグレーション実行
    kubectl apply -f - <<EOF
apiVersion: batch/v1
kind: Job
metadata:
  name: migration-$VERSION
  namespace: $ENVIRONMENT
spec:
  template:
    spec:
      restartPolicy: Never
      containers:
      - name: migration
        image: myapp/api:$VERSION
        command: ["python", "-m", "alembic", "upgrade", "head"]
        env:
        - name: DATABASE_URL
          valueFrom:
            secretKeyRef:
              name: app-secrets
              key: database_url
EOF

    # ジョブ完了待機
    kubectl wait --for=condition=complete job/migration-$VERSION -n $ENVIRONMENT --timeout=300s
    
    echo "✅ マイグレーション完了"
}

# アプリケーションデプロイ
deploy_application() {
    echo "🚢 アプリケーションデプロイ中..."
    
    # Helm チャートでデプロイ
    helm upgrade --install myapp ./helm/myapp \
        --namespace $ENVIRONMENT \
        --set image.tag=$VERSION \
        --set environment=$ENVIRONMENT \
        --values ./helm/values-$ENVIRONMENT.yaml \
        --wait
    
    echo "✅ アプリケーションデプロイ完了"
}

# ヘルスチェック
health_check() {
    echo "🏥 ヘルスチェック実行中..."
    
    local api_url
    if [[ "$ENVIRONMENT" == "production" ]]; then
        api_url="https://api.myapp.com"
    else
        api_url="https://api-staging.myapp.com"
    fi
    
    local max_attempts=30
    local attempt=1
    
    while [[ $attempt -le $max_attempts ]]; do
        if curl -f "$api_url/health" > /dev/null 2>&1; then
            echo "✅ ヘルスチェック成功"
            return 0
        fi
        
        echo "⏳ ヘルスチェック失敗 ($attempt/$max_attempts)"
        sleep 10
        ((attempt++))
    done
    
    echo "❌ ヘルスチェック失敗"
    return 1
}

# ロールバック関数
rollback() {
    echo "🔄 ロールバック実行中..."
    
    local previous_version
    previous_version=$(helm history myapp -n $ENVIRONMENT --max 2 -o json | jq -r '.[1].app_version')
    
    helm rollback myapp -n $ENVIRONMENT
    
    echo "✅ ロールバック完了 (version: $previous_version)"
}

# メイン実行
main() {
    check_prerequisites
    
    # バックアップ作成
    echo "💾 デプロイ前バックアップ作成中..."
    ./scripts/backup_production.sh
    
    build_and_push_images
    run_migrations
    deploy_application
    
    if ! health_check; then
        echo "❌ デプロイ失敗 - ロールバック実行"
        rollback
        exit 1
    fi
    
    echo "🎉 デプロイ成功！"
    echo "🌐 URL: https://$(kubectl get ingress myapp-ingress -n $ENVIRONMENT -o jsonpath='{.spec.rules[0].host}')"
}

main "$@"

SUPABASE_URL=https://your-project.supabase.co
SUPABASE_ANON_KEY=your-anon-key
SUPABASE_SERVICE_ROLE_KEY=your-service-key

# 外部サービス
STRIPE_SECRET_KEY=sk_test_...
SENDGRID_API_KEY=SG....

# デバッグ設定
DENO_DEBUG=true
LOG_LEVEL=DEBUG