Maxfield Luke
aa43ce2562
Add scripts/deploy.sh to build/start Magpie and ensure it joins elektrine-magpie-shared (alias magpie) so Elektrine can reach magpie:8090. Forgejo Actions rsyncs and runs the script on every main push.
81 lines
3.4 KiB
YAML
81 lines
3.4 KiB
YAML
# Deploy Magpie to production via SSH (linuxuser@elektrine.com).
|
|
# Joins Docker network elektrine-magpie-shared so Elektrine app/worker/caddy
|
|
# resolve magpie:8090. Secrets: DEPLOY_SSH_KEY, DEPLOY_SSH_HOST_KEY
|
|
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: magpie-deploy
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
deploy:
|
|
name: Deploy over SSH
|
|
runs-on: ubuntu-latest
|
|
needs: []
|
|
# Run after CI if both fire on same push — use a local test job first
|
|
steps:
|
|
- uses: https://data.forgejo.org/actions/checkout@v4
|
|
|
|
- name: Go test
|
|
run: |
|
|
set -euo pipefail
|
|
case "$GITHUB_WORKSPACE" in
|
|
/data/*) HOST_WS="/opt/forgejo-runner/data${GITHUB_WORKSPACE#/data}" ;;
|
|
*) HOST_WS="$GITHUB_WORKSPACE" ;;
|
|
esac
|
|
docker run --rm --network host \
|
|
-v "${HOST_WS}:/src" -w /src -e CGO_ENABLED=0 \
|
|
golang:1.25-bookworm \
|
|
sh -c "go test ./..."
|
|
|
|
- name: Configure SSH
|
|
env:
|
|
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
DEPLOY_SSH_HOST_KEY: ${{ secrets.DEPLOY_SSH_HOST_KEY || '66.42.127.87 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIM5Vx8UDcqvgmBwDs5SlCHd8/oGDoQytGHhbbp4LNK4o' }}
|
|
DEPLOY_HOST: ${{ vars.DEPLOY_HOST || 'elektrine.com' }}
|
|
DEPLOY_PORT: ${{ vars.DEPLOY_PORT || '22' }}
|
|
run: |
|
|
set -euo pipefail
|
|
install -d -m 0700 ~/.ssh
|
|
printf '%s\n' "$DEPLOY_SSH_KEY" | sed 's/\r$//' | sed 's/\\n/\n/g' > ~/.ssh/id_ed25519
|
|
chmod 0600 ~/.ssh/id_ed25519
|
|
: > ~/.ssh/known_hosts
|
|
printf '%s\n' "$DEPLOY_SSH_HOST_KEY" | sed 's/\r$//' | sed 's/\\n/\n/g' >> ~/.ssh/known_hosts
|
|
ssh-keyscan -p "$DEPLOY_PORT" -T 5 -t ed25519,rsa "$DEPLOY_HOST" 2>/dev/null >> ~/.ssh/known_hosts || true
|
|
chmod 0600 ~/.ssh/known_hosts
|
|
ssh -p "$DEPLOY_PORT" \
|
|
-i "$HOME/.ssh/id_ed25519" \
|
|
-o BatchMode=yes -o IdentitiesOnly=yes \
|
|
-o StrictHostKeyChecking=yes \
|
|
-o UserKnownHostsFile="$HOME/.ssh/known_hosts" \
|
|
"${{ vars.DEPLOY_USER || 'linuxuser' }}@$DEPLOY_HOST" 'echo ssh_ok; hostname; id'
|
|
|
|
- name: Rsync and deploy
|
|
env:
|
|
DEPLOY_HOST: ${{ vars.DEPLOY_HOST || 'elektrine.com' }}
|
|
DEPLOY_USER: ${{ vars.DEPLOY_USER || 'linuxuser' }}
|
|
DEPLOY_PORT: ${{ vars.DEPLOY_PORT || '22' }}
|
|
DEPLOY_PATH: ${{ vars.DEPLOY_PATH || '/opt/magpie' }}
|
|
run: |
|
|
set -euo pipefail
|
|
RSYNC_RSH="ssh -p ${DEPLOY_PORT} -i ${HOME}/.ssh/id_ed25519 -o BatchMode=yes -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes -o UserKnownHostsFile=${HOME}/.ssh/known_hosts"
|
|
# Preserve production secrets and data mounts
|
|
rsync -az --delete \
|
|
-e "$RSYNC_RSH" \
|
|
--exclude '.git/' \
|
|
--exclude '.env.production' \
|
|
--exclude 'dist/' \
|
|
--exclude 'magpie' \
|
|
./ "${DEPLOY_USER}@${DEPLOY_HOST}:${DEPLOY_PATH}/"
|
|
ssh -p "$DEPLOY_PORT" \
|
|
-i "$HOME/.ssh/id_ed25519" \
|
|
-o BatchMode=yes -o IdentitiesOnly=yes \
|
|
-o StrictHostKeyChecking=yes \
|
|
-o UserKnownHostsFile="$HOME/.ssh/known_hosts" \
|
|
"${DEPLOY_USER}@${DEPLOY_HOST}" \
|
|
"chmod +x ${DEPLOY_PATH}/scripts/deploy.sh && cd ${DEPLOY_PATH} && ./scripts/deploy.sh"
|