gitea
612b204c9a
All checks were successful
Build and Deploy Demo App / build-and-deploy (push) Successful in 1m35s
80 lines
3.6 KiB
YAML
80 lines
3.6 KiB
YAML
name: Build and Deploy Demo App
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
- name: Build Docker image
|
|
run: docker build -t demo-app:latest .
|
|
- name: Save Docker image to tar
|
|
run: docker save demo-app:latest > demo-app.tar
|
|
- name: Set up SSH
|
|
run: |
|
|
apt update && apt install -y openssh-client
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
eval "$(ssh-agent -s)"
|
|
ssh-add ~/.ssh/id_ed25519
|
|
ssh-keyscan -p ${{ secrets.SERVER_PORT }} ${{ secrets.SERVER_HOST }} >> ~/.ssh/known_hosts
|
|
- name: Copy files to server via SCP
|
|
run: |
|
|
scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} demo-app.tar ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}demo-app.tar
|
|
scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} docker-compose.yml ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}docker-compose.yml
|
|
scp -o StrictHostKeyChecking=no -P ${{ secrets.SERVER_PORT }} -r nginx_user_conf.d ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}nginx_user_conf.d
|
|
- name: Deploy on server via SSH
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=no -p ${{ secrets.SERVER_PORT }} ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }} << EOF
|
|
cd ${{ secrets.DEPLOY_PATH }}
|
|
|
|
# Check and install Docker if not present (Ubuntu/Debian assumed)
|
|
if ! command -v docker &> /dev/null; then
|
|
sudo apt update -y
|
|
sudo apt install -y ca-certificates curl
|
|
sudo install -m 0755 -d /etc/apt/keyrings
|
|
sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc
|
|
sudo chmod a+r /etc/apt/keyrings/docker.asc
|
|
echo "deb [arch=\$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \$(. /etc/os-release && echo "\$VERSION_CODENAME") stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
|
|
sudo apt update -y
|
|
sudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
|
|
sudo systemctl start docker
|
|
sudo systemctl enable docker
|
|
fi
|
|
|
|
# Ensure docker-compose-plugin is installed (for 'docker compose' command)
|
|
if ! docker compose version &> /dev/null; then
|
|
sudo apt update -y
|
|
sudo apt install -y docker-compose-plugin
|
|
fi
|
|
|
|
# Load image
|
|
docker load -i demo-app.tar
|
|
|
|
# Graceful stop
|
|
docker compose down --remove-orphans -v || true
|
|
|
|
# Obtain initial cert if not present (standalone mode; ports are free since down)
|
|
if [ ! -d "letsencrypt/live/demo.networkwizard.xyz" ]; then
|
|
docker run --rm \
|
|
-p 80:80 \
|
|
-v ${PWD}/letsencrypt:/etc/letsencrypt \
|
|
certbot/certbot certonly --standalone \
|
|
-d demo.networkwizard.xyz \
|
|
--email your@email.com \
|
|
--agree-tos \
|
|
--non-interactive
|
|
fi
|
|
|
|
# Deploy
|
|
docker compose up -d --force-recreate
|
|
|
|
# Cleanup
|
|
rm demo-app.tar
|
|
EOF |