Merge pull request #2396 from owenvoke/feature/razzia-4

feat(razzia): update to support 4.x

Author: MickLesk

ct/razzia.sh

@@ -1,8 +1,5 @@
 #!/usr/bin/env bash
 _CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/DevScripts/main"
-# Engine comes from community-scripts/core; this repo only ships the scripts.
-# A local core checkout wins (COMMUNITY_SCRIPTS_CORE_DIR, else a sibling ../core),
-# so a fork or branch of core can be tested without editing this file.
 _cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
 source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
 # Copyright (c) 2021-2026 community-scripts ORG
@@ -41,8 +38,12 @@ function update_script() {
     systemctl stop razzia
     msg_ok "Stopped Service"
 
+    create_backup /opt/razzia/.env
+
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "razzia" "Ralex91/Razzia" "tarball"
 
+    restore_backup
+
     NODE_VERSION="24" NODE_MODULE="pnpm@11" setup_nodejs
 
     msg_info "Building Razzia"

install/razzia-install.sh

@@ -28,10 +28,9 @@ msg_ok "Built Razzia"
 
 msg_info "Configuring Razzia"
 mkdir -p /opt/razzia-config
-cat <<EOF >/opt/razzia-config/game.json
-{
-  "managerPassword": "$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)"
-}
+cat <<EOF >/opt/razzia/.env
+MANAGER_PASSWORD=$(random_password 16)
+JWT_SECRET=$(openssl rand -hex 32)
 EOF
 msg_ok "Configured Razzia"
 
@@ -45,6 +44,7 @@ After=network.target
 Type=simple
 User=root
 WorkingDirectory=/opt/razzia/packages/socket
+EnvironmentFile=/opt/razzia/.env
 Environment=NODE_ENV=production
 Environment=CONFIG_PATH=/opt/razzia-config
 ExecStart=/usr/bin/node /opt/razzia/packages/socket/dist/index.cjs
@@ -74,15 +74,37 @@ server {
     alias /opt/razzia-config/branding/;
   }
 
+  location /media/ {
+    alias /opt/razzia-config/media/;
+    types {
+      image/png png;
+      image/jpeg jpg;
+      image/webp webp;
+      image/gif gif;
+      audio/mpeg mp3;
+      audio/ogg ogg;
+      audio/wav wav;
+      video/mp4 mp4;
+      video/webm webm;
+    }
+    default_type application/octet-stream;
+    add_header X-Content-Type-Options nosniff;
+  }
+
+  location /api {
+    client_max_body_size 101m;
+    proxy_pass http://127.0.0.1:3001;
+    proxy_set_header Host \$host;
+    proxy_read_timeout 300s;
+    proxy_send_timeout 300s;
+  }
+
   location /ws {
     proxy_pass http://127.0.0.1:3001;
     proxy_http_version 1.1;
     proxy_set_header Upgrade \$http_upgrade;
     proxy_set_header Connection "upgrade";
     proxy_set_header Host \$host;
-    proxy_set_header X-Real-IP \$remote_addr;
-    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto \$scheme;
     proxy_read_timeout 3600s;
     proxy_send_timeout 3600s;
   }

json/razzia.json

@@ -12,16 +12,13 @@
   "documentation": "https://github.com/Ralex91/Razzia/blob/main/docs/README.md",
   "website": "https://github.com/Ralex91/Razzia",
   "repository": "https://github.com/Ralex91/Razzia",
-  "architectures": [
-    "amd64"
-  ],
   "logo": "https://cdn.jsdelivr.net/gh/Ralex91/Razzia@main/packages/web/public/icon.svg",
   "description": "Razzia is a self-hosted, open-source quiz platform for smaller events. A manager hosts a live quiz from the browser while participants join with a room code from their own devices, with quizzes, results and custom branding stored as files in the config folder.",
   "install_methods": [
     {
       "type": "default",
       "script": "ct/razzia.sh",
-      "config_path": "/opt/razzia-config/game.json",
+      "config_path": "/opt/razzia/.env",
       "resources": {
         "cpu": 2,
         "ram": 3072,
@@ -37,15 +34,19 @@
   },
   "notes": [
     {
-      "text": "The manager password is generated during installation and stored in /opt/razzia-config/game.json. Open the manager interface at http://<IP>:3000/manager and log in with it. Manager access stays blocked while managerPassword is the upstream default value \"PASSWORD\".",
+      "text": "The manager password is generated during installation and stored as MANAGER_PASSWORD in /opt/razzia/.env. Open the manager interface at http://<IP>:3000/manager and log in with it. Manager access is refused until MANAGER_PASSWORD is set.",
+      "type": "info"
+    },
+    {
+      "text": "JWT_SECRET in /opt/razzia/.env signs the session tokens and is generated during installation. Leaving it empty makes the server generate a new secret at every start, which logs managers out and gives players a fresh identity on each restart. It must be at least 32 characters; a shorter value is ignored. Restart the service after editing the file: systemctl restart razzia",
       "type": "info"
     },
     {
-      "text": "Quizzes, saved results and optional branding live in /opt/razzia-config (quizz/, results/, branding/). An example quiz is created there on first start. Restart the service after editing game.json: systemctl restart razzia",
+      "text": "Quizzes, saved results, uploaded media and optional branding live in /opt/razzia-config (quizz/, results/, media/, branding/). An example quiz is created there on first start.",
       "type": "info"
     },
     {
-      "text": "Game state is kept in memory by the socket server, so only run a single instance. Behind a reverse proxy, WebSocket upgrade headers must be forwarded to port 3000 or clients stay stuck on connecting.",
+      "text": "Game state is kept in memory by the socket server, so only run a single instance. Behind a reverse proxy, WebSocket upgrade headers must be forwarded to port 3000 or clients stay stuck on connecting, and the upload limit must allow 100 MB media files.",
       "type": "warning"
     }
   ]