From d2e3be335634901bb7bff204a070840d78fb2a80 Mon Sep 17 00:00:00 2001 From: sorcier Date: Thu, 5 Nov 2026 23:48:53 +0100 Subject: [PATCH] perf(db): eliminate redundant DDL execution on every request and add nexus-cluster to update.sh sudoers --- scripts/update.sh | 2 +- src/Database.php | 13 ++++++++++--- 2 files changed, 11 insertions(+), 4 deletions(-) diff --git a/scripts/update.sh b/scripts/update.sh index 1a48da7..029defb 100755 --- a/scripts/update.sh +++ b/scripts/update.sh @@ -112,7 +112,7 @@ ln -sf "$APP_DIR/scripts/nexus-banner.sh" /usr/local/bin/nexus-banner 2>/dev/nul # Mise à jour des privilèges sudoers (www-data) si accessible en écriture if [ -w /etc/sudoers.d ]; then cat << 'EOF_SUDO' > /etc/sudoers.d/nexus-pbx 2>/dev/null || true -www-data ALL=(ALL) NOPASSWD: /usr/sbin/asterisk, /usr/sbin/nginx, /usr/bin/systemctl, /usr/bin/fail2ban-client, /bin/fail2ban-client, /var/www/nexus-pbx/scripts/nexus-firewall, /usr/bin/certbot, /usr/sbin/nft, /usr/sbin/iptables, /var/www/nexus-pbx/scripts/update.sh, /usr/local/bin/nexus-update +www-data ALL=(ALL) NOPASSWD: /usr/sbin/asterisk, /usr/sbin/nginx, /usr/bin/systemctl, /usr/bin/fail2ban-client, /bin/fail2ban-client, /var/www/nexus-pbx/scripts/nexus-firewall, /usr/bin/certbot, /usr/sbin/nft, /usr/sbin/iptables, /var/www/nexus-pbx/scripts/update.sh, /usr/local/bin/nexus-update, /var/www/nexus-pbx/scripts/nexus-cluster EOF_SUDO chmod 0440 /etc/sudoers.d/nexus-pbx 2>/dev/null || true fi diff --git a/src/Database.php b/src/Database.php index a13fed0..0bef49e 100644 --- a/src/Database.php +++ b/src/Database.php @@ -29,7 +29,7 @@ class Database mkdir($dir, 0770, true); } - $isNew = !file_exists(self::DB_PATH); + $isNew = !file_exists(self::DB_PATH) || filesize(self::DB_PATH) === 0; self::$instance = new PDO('sqlite:' . self::DB_PATH, null, null, [ PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION, @@ -41,10 +41,17 @@ class Database self::$instance->exec('PRAGMA journal_mode = WAL;'); self::$instance->exec('PRAGMA busy_timeout = 5000;'); - self::initializeSchema(); - if ($isNew) { + self::initializeSchema(); @chmod(self::DB_PATH, 0660); + } else { + // Si la base existe déjà, éviter d'exécuter l'intégralité du DDL à chaque requête HTTP + // ce qui sature SQLite de verrous exclusifs inutiles. On teste juste l'existence de la table principale. + try { + self::$instance->query("SELECT 1 FROM settings LIMIT 1"); + } catch (\Throwable $e) { + self::initializeSchema(); + } } }