feat: add deployment configuration

- Dockerfile: production image for roux-server (Debian slim, tini, binary) - docker-compose.yml: production compose with recipe/data volume mounts - .gitea/workflows/deploy.yaml: Gitea Actions pipeline that builds, tests, pushes Docker image, and deploys via SSH Follows the same pattern used by the Atlas project.
2026-05-19 22:58:52 -04:00
parent a70cd86afd
commit f9ee6240c3
3 changed files with 120 additions and 0 deletions
@@ -0,0 +1,89 @@
+name: Build and Deploy
+
+on:
+  push:
+    branches: [main]
+
+jobs:
+  build-and-deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Install Stack
+        run: |
+          curl -sSL https://get.haskellstack.org/ | sh
+          echo "$HOME/.local/bin" >> $GITHUB_PATH
+
+      - name: Cache Stack root
+        uses: actions/cache@v4
+        with:
+          path: ~/.stack
+          key: stack-${{ hashFiles('stack.yaml', 'package.yaml') }}
+          restore-keys: stack-
+
+      - name: Install fourmolu
+        run: |
+          FOURMOLU_URL=https://github.com/fourmolu/fourmolu/releases/download/v0.19.0.1/fourmolu-0.19.0.1-linux-x86_64
+          curl -fsSL "$FOURMOLU_URL" -o /usr/local/bin/fourmolu
+          chmod +x /usr/local/bin/fourmolu
+
+      - name: Check formatting
+        run: fourmolu --mode check app/ src/ test/
+
+      - name: Lint
+        run: stack exec -- hlint app/ src/ test/
+
+      - name: Build
+        run: stack build --copy-bins --local-bin-path ./dist
+
+      - name: Run tests
+        run: stack test
+
+      - name: Login to Gitea Container Registry
+        env:
+          CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
+        run: |
+          if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
+            echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
+            exit 0
+          fi
+          echo "$CONTAINER_REGISTRY_TOKEN" | docker login git.roo.lol -u ${{ github.actor }} --password-stdin
+
+      - name: Build and push Docker image
+        env:
+          CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
+        run: |
+          if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
+            echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
+            exit 0
+          fi
+          cp ./dist/roux-server .
+          docker build \
+            -t git.roo.lol/${{ github.repository }}:latest \
+            -t git.roo.lol/${{ github.repository }}:${{ github.sha }} \
+            .
+          docker push git.roo.lol/${{ github.repository }}:latest
+          docker push git.roo.lol/${{ github.repository }}:${{ github.sha }}
+
+      - name: Deploy to production
+        env:
+          DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
+          DEPLOY_USER: ${{ vars.DEPLOY_USER }}
+          DEPLOY_HOST: ${{ vars.DEPLOY_HOST }}
+          DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
+        run: |
+          if [ -z "$DEPLOY_KEY" ] || [ -z "$DEPLOY_USER" ] || [ -z "$DEPLOY_HOST" ] || [ -z "$DEPLOY_DIRECTORY" ]; then
+            [ -z "$DEPLOY_KEY" ] && echo "MISSING SECRET: DEPLOY_KEY"
+            [ -z "$DEPLOY_USER" ] && echo "MISSING VAR: DEPLOY_USER"
+            [ -z "$DEPLOY_HOST" ] && echo "MISSING VAR: DEPLOY_HOST"
+            [ -z "$DEPLOY_DIRECTORY" ] && echo "MISSING VAR: DEPLOY_DIRECTORY"
+            echo "Deploy secrets not fully set, skipping deployment"
+            exit 0
+          fi
+          mkdir -p ~/.ssh
+          echo "$DEPLOY_KEY" > ~/.ssh/deploy_key
+          chmod 600 ~/.ssh/deploy_key
+          ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" \
+            "cd $DEPLOY_DIRECTORY && docker compose pull && docker compose down && docker compose up -d"