feat: 集成 OpenTofu + Ansible + Gitea CI/CD

- 重构项目目录结构
- 添加 OpenTofu 多云支持
- 配置 Ansible 自动化部署
- 集成 Gitea Actions CI/CD 流水线
- 添加 Docker Swarm 管理
- 完善监控和安全配置

scripts/ops-manager.sh

@@ -1,260 +0,0 @@
-#!/bin/bash
-
-# Operations Manager - 便捷的运维脚本管理工具
-# 使用方法: ./ops-manager.sh [action] [target] [options]
-
-set -e
-
-# 颜色定义
-RED='\033[0;31m'
-GREEN='\033[0;32m'
-YELLOW='\033[1;33m'
-BLUE='\033[0;34m'
-PURPLE='\033[0;35m'
-CYAN='\033[0;36m'
-NC='\033[0m' # No Color
-
-# 配置
-ANSIBLE_DIR="$(dirname "$0")/../ansible"
-INVENTORY="$ANSIBLE_DIR/inventory.ini"
-
-# 可用的操作
-declare -A OPERATIONS=(
-    ["update"]="system-update.yml"
-    ["cleanup"]="system-cleanup.yml"
-    ["health"]="service-health-check.yml"
-    ["security"]="security-hardening.yml"
-    ["docker"]="docker-management.yml"
-    ["network"]="network-connectivity.yml"
-    ["cert"]="certificate-management.yml"
-    ["toolkit"]="ops-toolkit.yml"
-    ["cloud"]="cloud-providers-update.yml"
-)
-
-# 可用的目标组
-declare -A TARGETS=(
-    ["all"]="all"
-    ["lxc"]="lxc"
-    ["alpine"]="alpine"
-    ["proxmox"]="proxmox"
-    ["armbian"]="armbian"
-    ["hcp"]="hcp"
-    ["feiniu"]="feiniu"
-    ["dev"]="dev"
-    ["oci-kr"]="oci_kr"
-    ["oci-us"]="oci_us"
-    ["huawei"]="huawei"
-    ["google"]="google"
-    ["aws"]="aws"
-    ["germany"]="germany"
-)
-
-# 显示帮助信息
-show_help() {
-    echo -e "${CYAN}🛠️  Operations Manager - 运维脚本管理工具${NC}"
-    echo ""
-    echo -e "${YELLOW}使用方法:${NC}"
-    echo "  $0 [操作] [目标] [选项]"
-    echo ""
-    echo -e "${YELLOW}可用操作:${NC}"
-    for op in "${!OPERATIONS[@]}"; do
-        echo -e "  ${GREEN}$op${NC} - ${OPERATIONS[$op]}"
-    done
-    echo ""
-    echo -e "${YELLOW}可用目标:${NC}"
-    for target in "${!TARGETS[@]}"; do
-        echo -e "  ${BLUE}$target${NC} - ${TARGETS[$target]}"
-    done
-    echo ""
-    echo -e "${YELLOW}示例:${NC}"
-    echo -e "  $0 ${GREEN}update${NC} ${BLUE}lxc${NC}           # 更新 LXC 容器"
-    echo -e "  $0 ${GREEN}cleanup${NC} ${BLUE}all${NC}          # 清理所有服务器"
-    echo -e "  $0 ${GREEN}health${NC} ${BLUE}proxmox${NC}       # 检查 Proxmox 健康状态"
-    echo -e "  $0 ${GREEN}docker${NC} ${BLUE}lxc${NC}           # 管理 LXC 中的 Docker"
-    echo -e "  $0 ${GREEN}toolkit${NC} ${BLUE}germany${NC}      # 运行德国服务器工具包"
-    echo ""
-    echo -e "${YELLOW}选项:${NC}"
-    echo -e "  ${PURPLE}--dry-run${NC}        仅显示将要执行的命令"
-    echo -e "  ${PURPLE}--verbose${NC}        显示详细输出"
-    echo -e "  ${PURPLE}--check${NC}          检查模式（不做实际更改）"
-    echo -e "  ${PURPLE}--help${NC}           显示此帮助信息"
-}
-
-# 显示状态信息
-show_status() {
-    echo -e "${CYAN}📊 系统状态概览${NC}"
-    echo ""
-    
-    # 检查 Ansible 是否可用
-    if command -v ansible >/dev/null 2>&1; then
-        echo -e "${GREEN}✅ Ansible 已安装${NC}"
-    else
-        echo -e "${RED}❌ Ansible 未安装${NC}"
-        exit 1
-    fi
-    
-    # 检查 inventory 文件
-    if [ -f "$INVENTORY" ]; then
-        echo -e "${GREEN}✅ Inventory 文件存在${NC}"
-        echo -e "   📁 路径: $INVENTORY"
-    else
-        echo -e "${RED}❌ Inventory 文件不存在${NC}"
-        exit 1
-    fi
-    
-    # 显示可用的主机组
-    echo ""
-    echo -e "${YELLOW}📋 可用主机组:${NC}"
-    ansible-inventory -i "$INVENTORY" --list | jq -r 'keys[]' | grep -v "_meta" | sort | while read group; do
-        count=$(ansible-inventory -i "$INVENTORY" --list | jq -r ".[\"$group\"].hosts // [] | length")
-        echo -e "  ${BLUE}$group${NC}: $count 台主机"
-    done
-}
-
-# 执行 Ansible 命令
-run_ansible() {
-    local operation=$1
-    local target=$2
-    local options=$3
-    
-    local playbook="${OPERATIONS[$operation]}"
-    local host_pattern="${TARGETS[$target]}"
-    
-    if [ -z "$playbook" ]; then
-        echo -e "${RED}❌ 未知操作: $operation${NC}"
-        show_help
-        exit 1
-    fi
-    
-    if [ -z "$host_pattern" ]; then
-        echo -e "${RED}❌ 未知目标: $target${NC}"
-        show_help
-        exit 1
-    fi
-    
-    local ansible_cmd="ansible-playbook -i $INVENTORY $ANSIBLE_DIR/$playbook --limit $host_pattern"
-    
-    # 添加选项
-    if [[ "$options" == *"--check"* ]]; then
-        ansible_cmd="$ansible_cmd --check"
-    fi
-    
-    if [[ "$options" == *"--verbose"* ]]; then
-        ansible_cmd="$ansible_cmd -v"
-    fi
-    
-    echo -e "${CYAN}🚀 执行操作${NC}"
-    echo -e "操作: ${GREEN}$operation${NC} ($playbook)"
-    echo -e "目标: ${BLUE}$target${NC} ($host_pattern)"
-    echo -e "命令: ${PURPLE}$ansible_cmd${NC}"
-    echo ""
-    
-    if [[ "$options" == *"--dry-run"* ]]; then
-        echo -e "${YELLOW}🔍 DRY RUN 模式 - 仅显示命令，不执行${NC}"
-        return 0
-    fi
-    
-    # 确认执行
-    read -p "确认执行? (y/N): " -n 1 -r
-    echo
-    if [[ ! $REPLY =~ ^[Yy]$ ]]; then
-        echo -e "${YELLOW}⏹️  操作已取消${NC}"
-        exit 0
-    fi
-    
-    echo -e "${GREEN}▶️  开始执行...${NC}"
-    eval $ansible_cmd
-}
-
-# 快速操作菜单
-interactive_mode() {
-    echo -e "${CYAN}🎯 交互式运维管理${NC}"
-    echo ""
-    
-    # 选择操作
-    echo -e "${YELLOW}选择操作:${NC}"
-    local ops=($(printf '%s\n' "${!OPERATIONS[@]}" | sort))
-    for i in "${!ops[@]}"; do
-        echo -e "  $((i+1)). ${GREEN}${ops[i]}${NC} - ${OPERATIONS[${ops[i]}]}"
-    done
-    
-    read -p "请选择操作 (1-${#ops[@]}): " op_choice
-    if [[ ! "$op_choice" =~ ^[0-9]+$ ]] || [ "$op_choice" -lt 1 ] || [ "$op_choice" -gt "${#ops[@]}" ]; then
-        echo -e "${RED}❌ 无效选择${NC}"
-        exit 1
-    fi
-    
-    local selected_op="${ops[$((op_choice-1))]}"
-    
-    # 选择目标
-    echo ""
-    echo -e "${YELLOW}选择目标:${NC}"
-    local targets=($(printf '%s\n' "${!TARGETS[@]}" | sort))
-    for i in "${!targets[@]}"; do
-        echo -e "  $((i+1)). ${BLUE}${targets[i]}${NC} - ${TARGETS[${targets[i]}]}"
-    done
-    
-    read -p "请选择目标 (1-${#targets[@]}): " target_choice
-    if [[ ! "$target_choice" =~ ^[0-9]+$ ]] || [ "$target_choice" -lt 1 ] || [ "$target_choice" -gt "${#targets[@]}" ]; then
-        echo -e "${RED}❌ 无效选择${NC}"
-        exit 1
-    fi
-    
-    local selected_target="${targets[$((target_choice-1))]}"
-    
-    # 选择选项
-    echo ""
-    echo -e "${YELLOW}选择执行选项:${NC}"
-    echo -e "  1. ${GREEN}正常执行${NC}"
-    echo -e "  2. ${PURPLE}检查模式${NC} (--check)"
-    echo -e "  3. ${PURPLE}详细输出${NC} (--verbose)"
-    echo -e "  4. ${PURPLE}仅显示命令${NC} (--dry-run)"
-    
-    read -p "请选择选项 (1-4): " option_choice
-    
-    local options=""
-    case $option_choice in
-        2) options="--check" ;;
-        3) options="--verbose" ;;
-        4) options="--dry-run" ;;
-    esac
-    
-    run_ansible "$selected_op" "$selected_target" "$options"
-}
-
-# 主程序
-main() {
-    # 检查参数
-    if [ $# -eq 0 ]; then
-        interactive_mode
-        exit 0
-    fi
-    
-    case "$1" in
-        --help|-h|help)
-            show_help
-            ;;
-        --status|-s|status)
-            show_status
-            ;;
-        --interactive|-i|interactive)
-            interactive_mode
-            ;;
-        *)
-            if [ $# -lt 2 ]; then
-                echo -e "${RED}❌ 参数不足${NC}"
-                show_help
-                exit 1
-            fi
-            
-            local operation=$1
-            local target=$2
-            local options="${@:3}"
-            
-            run_ansible "$operation" "$target" "$options"
-            ;;
-    esac
-}
-
-# 执行主程序
-main "$@"

scripts/setup/setup-gitea-integration.sh

@@ -0,0 +1,467 @@
+#!/bin/bash
+# Gitea 集成设置脚本
+
+set -e
+
+echo "🔗 设置 Gitea 集成..."
+
+# 配置变量
+GITEA_HOST="gitea"
+GITEA_USER="ben"
+GITEA_SSH_URL="git@${GITEA_HOST}"
+REPO_NAME="mgmt"
+GITEA_HTTP_URL="http://${GITEA_HOST}:3000"
+
+# 检查 SSH 连接
+echo "🔍 检查 Gitea SSH 连接..."
+if ssh -o ConnectTimeout=5 -o BatchMode=yes "${GITEA_SSH_URL}" 2>&1 | grep -q "successfully authenticated"; then
+    echo "✅ SSH 连接正常"
+else
+    echo "❌ SSH 连接失败，请检查："
+    echo "   1. Gitea 服务是否运行"
+    echo "   2. SSH 密钥是否已添加到 Gitea"
+    echo "   3. 网络连接是否正常"
+    exit 1
+fi
+
+# 检查是否已经是 Git 仓库
+if [ ! -d ".git" ]; then
+    echo "📦 初始化 Git 仓库..."
+    git init
+    git config user.name "${GITEA_USER}"
+    git config user.email "${GITEA_USER}@example.com"
+else
+    echo "✅ Git 仓库已存在"
+fi
+
+# 检查远程仓库配置
+if git remote get-url origin >/dev/null 2>&1; then
+    CURRENT_ORIGIN=$(git remote get-url origin)
+    echo "ℹ️  当前远程仓库: $CURRENT_ORIGIN"
+    
+    if [[ "$CURRENT_ORIGIN" != *"${GITEA_HOST}"* ]]; then
+        echo "🔄 更新远程仓库地址..."
+        git remote set-url origin "${GITEA_SSH_URL}:${GITEA_USER}/${REPO_NAME}.git"
+    fi
+else
+    echo "➕ 添加远程仓库..."
+    git remote add origin "${GITEA_SSH_URL}:${GITEA_USER}/${REPO_NAME}.git"
+fi
+
+# 创建 .gitignore
+echo "📝 创建 .gitignore..."
+cat > .gitignore << 'EOF'
+# OpenTofu/Terraform
+*.tfstate
+*.tfstate.*
+*.tfvars
+!*.tfvars.example
+.terraform/
+.terraform.lock.hcl
+crash.log
+crash.*.log
+
+# Ansible
+*.retry
+.vault_pass
+host_vars/*/vault.yml
+group_vars/*/vault.yml
+
+# Docker
+.env
+docker-compose.override.yml
+
+# IDE
+.vscode/
+.idea/
+*.swp
+*.swo
+*~
+
+# OS
+.DS_Store
+Thumbs.db
+
+# Logs
+*.log
+logs/
+
+# Temporary files
+tmp/
+temp/
+.tmp/
+
+# Backup files
+backup-*/
+*.bak
+
+# Secrets
+secrets/
+*.pem
+*.key
+*.crt
+!*.example.*
+
+# Node modules (if any)
+node_modules/
+
+# Python
+__pycache__/
+*.pyc
+*.pyo
+*.pyd
+.Python
+env/
+venv/
+.venv/
+pip-log.txt
+pip-delete-this-directory.txt
+.tox/
+.coverage
+.coverage.*
+.cache
+nosetests.xml
+coverage.xml
+*.cover
+*.log
+.git
+.mypy_cache
+.pytest_cache
+.hypothesis
+
+# Local development
+.local/
+local-*
+EOF
+
+# 创建 Gitea Actions 工作流
+echo "🔄 创建 Gitea Actions 工作流..."
+
+# 基础设施 CI/CD
+cat > .gitea/workflows/infrastructure.yml << 'EOF'
+name: Infrastructure CI/CD
+
+on:
+  push:
+    branches: [ main, develop ]
+    paths:
+      - 'infrastructure/**'
+      - '.gitea/workflows/infrastructure.yml'
+  pull_request:
+    branches: [ main ]
+    paths:
+      - 'infrastructure/**'
+
+jobs:
+  validate:
+    runs-on: ubuntu-latest
+    name: Validate Infrastructure
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup OpenTofu
+        uses: opentofu/setup-opentofu@v1
+        with:
+          tofu_version: 1.10.6
+
+      - name: Validate OpenTofu configurations
+        run: |
+          for dir in infrastructure/providers/*/; do
+            if [ -d "$dir" ]; then
+              echo "Validating $dir"
+              cd "$dir"
+              tofu init -backend=false
+              tofu validate
+              cd - > /dev/null
+            fi
+          done
+
+      - name: Check formatting
+        run: |
+          tofu fmt -check -recursive infrastructure/
+
+      - name: Security scan
+        run: |
+          # 这里可以添加 tfsec 或 checkov 扫描
+          echo "Security scan placeholder"
+
+  plan:
+    runs-on: ubuntu-latest
+    name: Plan Infrastructure
+    needs: validate
+    if: github.event_name == 'pull_request'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup OpenTofu
+        uses: opentofu/setup-opentofu@v1
+        with:
+          tofu_version: 1.10.6
+
+      - name: Plan infrastructure changes
+        run: |
+          cd infrastructure/environments/dev
+          tofu init
+          tofu plan -var-file="terraform.tfvars" -out=tfplan
+        env:
+          # 这里需要配置云服务商的环境变量
+          TF_VAR_environment: dev
+
+  apply:
+    runs-on: ubuntu-latest
+    name: Apply Infrastructure
+    needs: validate
+    if: github.ref == 'refs/heads/main' && github.event_name == 'push'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup OpenTofu
+        uses: opentofu/setup-opentofu@v1
+        with:
+          tofu_version: 1.10.6
+
+      - name: Apply infrastructure changes
+        run: |
+          cd infrastructure/environments/dev
+          tofu init
+          tofu apply -var-file="terraform.tfvars" -auto-approve
+        env:
+          TF_VAR_environment: dev
+EOF
+
+# 应用部署工作流
+cat > .gitea/workflows/deploy.yml << 'EOF'
+name: Application Deployment
+
+on:
+  push:
+    branches: [ main ]
+    paths:
+      - 'configuration/**'
+      - 'containers/**'
+      - '.gitea/workflows/deploy.yml'
+  workflow_dispatch:
+    inputs:
+      environment:
+        description: 'Target environment'
+        required: true
+        default: 'dev'
+        type: choice
+        options:
+          - dev
+          - staging
+          - production
+
+jobs:
+  ansible-check:
+    runs-on: ubuntu-latest
+    name: Ansible Syntax Check
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.11'
+
+      - name: Install Ansible
+        run: |
+          pip install ansible ansible-core
+          ansible-galaxy collection install community.general
+          ansible-galaxy collection install ansible.posix
+          ansible-galaxy collection install community.docker
+
+      - name: Ansible syntax check
+        run: |
+          cd configuration
+          for playbook in playbooks/*/*.yml; do
+            if [ -f "$playbook" ]; then
+              echo "Checking $playbook"
+              ansible-playbook --syntax-check "$playbook"
+            fi
+          done
+
+  deploy:
+    runs-on: ubuntu-latest
+    name: Deploy Applications
+    needs: ansible-check
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup Python
+        uses: actions/setup-python@v4
+        with:
+          python-version: '3.11'
+
+      - name: Install Ansible
+        run: |
+          pip install ansible ansible-core
+          ansible-galaxy collection install community.general
+          ansible-galaxy collection install ansible.posix
+          ansible-galaxy collection install community.docker
+
+      - name: Deploy applications
+        run: |
+          cd configuration
+          ENV="${{ github.event.inputs.environment || 'dev' }}"
+          ansible-playbook -i "inventories/${ENV}/inventory.ini" playbooks/bootstrap/main.yml
+        env:
+          ANSIBLE_HOST_KEY_CHECKING: False
+EOF
+
+# Docker 构建工作流
+cat > .gitea/workflows/docker.yml << 'EOF'
+name: Docker Build and Deploy
+
+on:
+  push:
+    branches: [ main ]
+    paths:
+      - 'containers/**'
+      - 'Dockerfile*'
+      - '.gitea/workflows/docker.yml'
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    name: Build Docker Images
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ secrets.REGISTRY_URL }}
+          username: ${{ secrets.REGISTRY_USERNAME }}
+          password: ${{ secrets.REGISTRY_PASSWORD }}
+
+      - name: Build and push images
+        run: |
+          # 构建应用镜像
+          for dockerfile in containers/applications/*/Dockerfile; do
+            if [ -f "$dockerfile" ]; then
+              app_name=$(basename $(dirname "$dockerfile"))
+              echo "Building $app_name"
+              docker build -t "${{ secrets.REGISTRY_URL }}/$app_name:${{ github.sha }}" -f "$dockerfile" .
+              docker push "${{ secrets.REGISTRY_URL }}/$app_name:${{ github.sha }}"
+            fi
+          done
+
+  deploy-swarm:
+    runs-on: ubuntu-latest
+    name: Deploy to Docker Swarm
+    needs: build
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Deploy to Swarm
+        run: |
+          # 这里可以通过 SSH 连接到 Swarm 管理节点进行部署
+          echo "Deploy to Swarm placeholder"
+EOF
+
+# 创建项目配置文件
+echo "⚙️ 创建项目配置文件..."
+
+# Gitea 仓库配置
+cat > .gitea/settings.yml << 'EOF'
+# Gitea 仓库设置
+repository:
+  name: mgmt
+  description: "基础设施管理项目 - OpenTofu + Ansible + Docker Swarm"
+  website: ""
+  default_branch: main
+  
+  # 功能开关
+  has_issues: true
+  has_wiki: true
+  has_projects: true
+  has_actions: true
+  
+  # 权限设置
+  private: false
+  allow_merge_commits: true
+  allow_squash_merge: true
+  allow_rebase_merge: true
+  delete_branch_on_merge: true
+
+# Actions 设置
+actions:
+  enabled: true
+  allow_fork_pull_request_run: true
+  default_actions_url: "https://gitea.com"
+
+# 分支保护
+branch_protection:
+  main:
+    enable_push: false
+    enable_push_whitelist: true
+    push_whitelist_usernames: ["ben"]
+    require_signed_commits: false
+    enable_merge_whitelist: true
+    merge_whitelist_usernames: ["ben"]
+    enable_status_check: true
+    status_check_contexts: ["validate", "plan"]
+    enable_approvals_whitelist: false
+    approvals_whitelist_usernames: []
+    block_on_rejected_reviews: true
+    dismiss_stale_approvals: true
+    require_signed_commits: false
+EOF
+
+# 添加所有文件到 Git
+echo "📦 添加文件到 Git..."
+git add .
+
+# 检查是否有变更需要提交
+if git diff --staged --quiet; then
+    echo "ℹ️  没有新的变更需要提交"
+else
+    echo "💾 提交变更..."
+    git commit -m "feat: 集成 OpenTofu + Ansible + Gitea CI/CD
+
+- 重构项目目录结构
+- 添加 OpenTofu 多云支持
+- 配置 Ansible 自动化部署
+- 集成 Gitea Actions CI/CD 流水线
+- 添加 Docker Swarm 管理
+- 完善监控和安全配置"
+fi
+
+# 推送到远程仓库
+echo "🚀 推送到 Gitea..."
+if git push -u origin main; then
+    echo "✅ 成功推送到 Gitea"
+else
+    echo "⚠️  推送失败，可能需要先在 Gitea 创建仓库"
+    echo "   请访问: ${GITEA_HTTP_URL}/repo/create"
+    echo "   创建名为 '${REPO_NAME}' 的仓库"
+fi
+
+echo ""
+echo "🎉 Gitea 集成设置完成！"
+echo ""
+echo "📋 下一步操作："
+echo "1. 访问 Gitea: ${GITEA_HTTP_URL}/${GITEA_USER}/${REPO_NAME}"
+echo "2. 配置 Actions Secrets (如果需要):"
+echo "   - REGISTRY_URL: 容器镜像仓库地址"
+echo "   - REGISTRY_USERNAME: 仓库用户名"
+echo "   - REGISTRY_PASSWORD: 仓库密码"
+echo "3. 配置云服务商凭据 (通过 Secrets 或环境变量)"
+echo "4. 测试 CI/CD 流水线"
+echo ""
+echo "🔗 有用的命令："
+echo "  git status                    - 查看仓库状态"
+echo "  git log --oneline            - 查看提交历史"
+echo "  git push                     - 推送变更"
+echo "  make help                    - 查看项目命令"

scripts/utilities/gitea-repo-manager.sh

@@ -0,0 +1,242 @@
+#!/bin/bash
+# Gitea 仓库管理脚本
+
+set -e
+
+# 配置
+GITEA_HOST="gitea"
+GITEA_USER="ben"
+GITEA_HTTP_URL="http://${GITEA_HOST}:3000"
+GITEA_SSH_URL="git@${GITEA_HOST}"
+REPO_NAME="mgmt"
+
+# 颜色定义
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# 打印带颜色的消息
+print_message() {
+    local color=$1
+    local message=$2
+    echo -e "${color}${message}${NC}"
+}
+
+# 检查 SSH 连接
+check_ssh_connection() {
+    print_message $BLUE "🔍 检查 Gitea SSH 连接..."
+    
+    if ssh -o ConnectTimeout=5 -o BatchMode=yes "${GITEA_SSH_URL}" 2>&1 | grep -q "successfully authenticated"; then
+        print_message $GREEN "✅ SSH 连接正常"
+        return 0
+    else
+        print_message $RED "❌ SSH 连接失败"
+        return 1
+    fi
+}
+
+# 检查仓库状态
+check_repo_status() {
+    print_message $BLUE "📊 检查仓库状态..."
+    
+    if [ -d ".git" ]; then
+        print_message $GREEN "✅ Git 仓库已初始化"
+        
+        if git remote get-url origin >/dev/null 2>&1; then
+            local origin_url=$(git remote get-url origin)
+            print_message $GREEN "✅ 远程仓库: $origin_url"
+        else
+            print_message $YELLOW "⚠️  未配置远程仓库"
+        fi
+        
+        local branch=$(git branch --show-current)
+        print_message $BLUE "📍 当前分支: $branch"
+        
+        local status=$(git status --porcelain)
+        if [ -z "$status" ]; then
+            print_message $GREEN "✅ 工作目录干净"
+        else
+            print_message $YELLOW "⚠️  有未提交的变更"
+        fi
+    else
+        print_message $RED "❌ 不是 Git 仓库"
+    fi
+}
+
+# 初始化仓库
+init_repo() {
+    print_message $BLUE "📦 初始化 Git 仓库..."
+    
+    if [ ! -d ".git" ]; then
+        git init
+        git config user.name "${GITEA_USER}"
+        git config user.email "${GITEA_USER}@example.com"
+        print_message $GREEN "✅ Git 仓库初始化完成"
+    fi
+    
+    # 配置远程仓库
+    if ! git remote get-url origin >/dev/null 2>&1; then
+        git remote add origin "${GITEA_SSH_URL}:${GITEA_USER}/${REPO_NAME}.git"
+        print_message $GREEN "✅ 远程仓库配置完成"
+    fi
+}
+
+# 同步代码
+sync_code() {
+    print_message $BLUE "🔄 同步代码..."
+    
+    # 检查是否有未提交的变更
+    if ! git diff --quiet || ! git diff --staged --quiet; then
+        print_message $YELLOW "⚠️  发现未提交的变更"
+        git status --short
+        
+        read -p "是否提交这些变更? (y/N): " -n 1 -r
+        echo
+        if [[ $REPLY =~ ^[Yy]$ ]]; then
+            git add .
+            read -p "请输入提交消息: " commit_message
+            git commit -m "$commit_message"
+            print_message $GREEN "✅ 变更已提交"
+        else
+            print_message $YELLOW "⚠️  跳过提交"
+            return 1
+        fi
+    fi
+    
+    # 推送到远程仓库
+    if git push origin main; then
+        print_message $GREEN "✅ 代码推送成功"
+    else
+        print_message $RED "❌ 代码推送失败"
+        return 1
+    fi
+}
+
+# 拉取最新代码
+pull_code() {
+    print_message $BLUE "⬇️  拉取最新代码..."
+    
+    if git pull origin main; then
+        print_message $GREEN "✅ 代码拉取成功"
+    else
+        print_message $RED "❌ 代码拉取失败"
+        return 1
+    fi
+}
+
+# 查看提交历史
+show_history() {
+    print_message $BLUE "📜 提交历史:"
+    git log --oneline --graph --decorate -10
+}
+
+# 查看分支状态
+show_branches() {
+    print_message $BLUE "🌿 分支状态:"
+    git branch -a
+}
+
+# 创建新分支
+create_branch() {
+    local branch_name=$1
+    if [ -z "$branch_name" ]; then
+        read -p "请输入分支名称: " branch_name
+    fi
+    
+    if [ -n "$branch_name" ]; then
+        git checkout -b "$branch_name"
+        print_message $GREEN "✅ 分支 '$branch_name' 创建成功"
+    else
+        print_message $RED "❌ 分支名称不能为空"
+    fi
+}
+
+# 切换分支
+switch_branch() {
+    local branch_name=$1
+    if [ -z "$branch_name" ]; then
+        print_message $BLUE "可用分支:"
+        git branch -a
+        read -p "请输入要切换的分支名称: " branch_name
+    fi
+    
+    if [ -n "$branch_name" ]; then
+        git checkout "$branch_name"
+        print_message $GREEN "✅ 已切换到分支 '$branch_name'"
+    else
+        print_message $RED "❌ 分支名称不能为空"
+    fi
+}
+
+# 显示帮助
+show_help() {
+    echo "Gitea 仓库管理脚本"
+    echo ""
+    echo "用法: $0 [命令]"
+    echo ""
+    echo "命令:"
+    echo "  check       检查连接和仓库状态"
+    echo "  init        初始化仓库"
+    echo "  sync        同步代码到远程仓库"
+    echo "  pull        拉取最新代码"
+    echo "  history     查看提交历史"
+    echo "  branches    查看分支状态"
+    echo "  create-branch [name]  创建新分支"
+    echo "  switch-branch [name]  切换分支"
+    echo "  status      查看仓库状态"
+    echo "  help        显示帮助信息"
+    echo ""
+    echo "示例:"
+    echo "  $0 check                    # 检查状态"
+    echo "  $0 sync                     # 同步代码"
+    echo "  $0 create-branch feature-x  # 创建功能分支"
+}
+
+# 主函数
+main() {
+    local command=${1:-help}
+    
+    case $command in
+        check)
+            check_ssh_connection
+            check_repo_status
+            ;;
+        init)
+            init_repo
+            ;;
+        sync)
+            sync_code
+            ;;
+        pull)
+            pull_code
+            ;;
+        history)
+            show_history
+            ;;
+        branches)
+            show_branches
+            ;;
+        create-branch)
+            create_branch "$2"
+            ;;
+        switch-branch)
+            switch_branch "$2"
+            ;;
+        status)
+            check_repo_status
+            ;;
+        help|--help|-h)
+            show_help
+            ;;
+        *)
+            print_message $RED "❌ 未知命令: $command"
+            show_help
+            exit 1
+            ;;
+    esac
+}
+
+# 执行主函数
+main "$@"

scripts/utilities/quick-start.sh

@@ -0,0 +1,114 @@
+#!/bin/bash
+# 快速启动脚本
+
+set -e
+
+echo "🚀 欢迎使用基础设施管理平台！"
+echo ""
+
+# 检查必要工具
+check_tool() {
+    if ! command -v "$1" &> /dev/null; then
+        echo "❌ $1 未安装，请先运行 'make setup'"
+        return 1
+    fi
+}
+
+echo "🔍 检查必要工具..."
+check_tool "tofu" || exit 1
+check_tool "ansible" || exit 1
+check_tool "docker" || exit 1
+
+echo "✅ 工具检查通过"
+echo ""
+
+# 检查配置文件
+CONFIG_FILE="infrastructure/environments/dev/terraform.tfvars"
+if [ ! -f "$CONFIG_FILE" ]; then
+    echo "⚠️  配置文件不存在，正在创建..."
+    cp "${CONFIG_FILE}.example" "$CONFIG_FILE"
+    echo "📝 请编辑配置文件: $CONFIG_FILE"
+    echo "   填入你的云服务商凭据后再次运行此脚本"
+    exit 1
+fi
+
+echo "✅ 配置文件存在"
+echo ""
+
+# 选择操作
+echo "请选择要执行的操作："
+echo "1) 初始化基础设施"
+echo "2) 查看执行计划"
+echo "3) 应用基础设施变更"
+echo "4) 部署应用"
+echo "5) 启动开发环境"
+echo "6) 查看监控"
+echo "7) 完整部署流程"
+echo ""
+
+read -p "请输入选项 (1-7): " choice
+
+case $choice in
+    1)
+        echo "🏗️  初始化基础设施..."
+        make init
+        ;;
+    2)
+        echo "📋 查看执行计划..."
+        make plan
+        ;;
+    3)
+        echo "🚀 应用基础设施变更..."
+        make apply
+        ;;
+    4)
+        echo "📦 部署应用..."
+        make ansible-deploy
+        ;;
+    5)
+        echo "🐳 启动开发环境..."
+        make docker-up
+        ;;
+    6)
+        echo "📊 启动监控..."
+        make monitor
+        ;;
+    7)
+        echo "🎯 执行完整部署流程..."
+        echo ""
+        echo "步骤 1/4: 初始化基础设施..."
+        make init
+        echo ""
+        echo "步骤 2/4: 查看执行计划..."
+        make plan
+        echo ""
+        read -p "是否继续应用基础设施变更? (y/N): " -n 1 -r
+        echo
+        if [[ $REPLY =~ ^[Yy]$ ]]; then
+            echo "步骤 3/4: 应用基础设施变更..."
+            make apply
+            echo ""
+            echo "步骤 4/4: 部署应用..."
+            make ansible-deploy
+            echo ""
+            echo "🎉 完整部署流程完成！"
+        else
+            echo "ℹ️  部署流程已取消"
+        fi
+        ;;
+    *)
+        echo "❌ 无效选项"
+        exit 1
+        ;;
+esac
+
+echo ""
+echo "🎉 操作完成！"
+echo ""
+echo "📋 有用的命令："
+echo "  make help          - 查看所有可用命令"
+echo "  make plan          - 查看基础设施变更计划"
+echo "  make apply         - 应用基础设施变更"
+echo "  make ansible-deploy - 部署应用"
+echo "  make monitor       - 启动监控"
+echo "  make clean         - 清理临时文件"