87 lines
3.1 KiB
YAML
87 lines
3.1 KiB
YAML
name: Build and Deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Stack
|
|
run: |
|
|
curl -sSL https://get.haskellstack.org/ | sh
|
|
echo "$HOME/.local/bin" >> $GITHUB_PATH
|
|
|
|
- name: Cache Stack root
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.stack
|
|
key: stack-${{ hashFiles('stack.yaml', 'package.yaml') }}
|
|
restore-keys: stack-
|
|
|
|
- name: Install fourmolu
|
|
run: |
|
|
FOURMOLU_URL=https://github.com/fourmolu/fourmolu/releases/download/v0.19.0.1/fourmolu-0.19.0.1-linux-x86_64
|
|
curl -fsSL "$FOURMOLU_URL" -o /usr/local/bin/fourmolu
|
|
chmod +x /usr/local/bin/fourmolu
|
|
|
|
- name: Check formatting
|
|
run: fourmolu --mode check app/ src/ test/
|
|
|
|
- name: Build
|
|
run: stack build --copy-bins --local-bin-path ./dist
|
|
|
|
- name: Run tests
|
|
run: stack test
|
|
|
|
- name: Login to Gitea Container Registry
|
|
env:
|
|
CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
|
|
run: |
|
|
if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
|
|
echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
|
|
exit 0
|
|
fi
|
|
echo "$CONTAINER_REGISTRY_TOKEN" | docker login git.roo.lol -u ${{ github.actor }} --password-stdin
|
|
|
|
- name: Build and push Docker image
|
|
env:
|
|
CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
|
|
run: |
|
|
if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
|
|
echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
|
|
exit 0
|
|
fi
|
|
cp ./dist/roux-server .
|
|
docker build \
|
|
-t git.roo.lol/${{ github.repository }}:latest \
|
|
-t git.roo.lol/${{ github.repository }}:${{ github.sha }} \
|
|
.
|
|
docker push git.roo.lol/${{ github.repository }}:latest
|
|
docker push git.roo.lol/${{ github.repository }}:${{ github.sha }}
|
|
|
|
- name: Deploy to production
|
|
env:
|
|
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
|
|
DEPLOY_USER: ${{ vars.DEPLOY_USER }}
|
|
DEPLOY_HOST: ${{ vars.DEPLOY_HOST }}
|
|
DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
|
|
run: |
|
|
if [ -z "$DEPLOY_KEY" ] || [ -z "$DEPLOY_USER" ] || [ -z "$DEPLOY_HOST" ] || [ -z "$DEPLOY_DIRECTORY" ]; then
|
|
[ -z "$DEPLOY_KEY" ] && echo "MISSING SECRET: DEPLOY_KEY"
|
|
[ -z "$DEPLOY_USER" ] && echo "MISSING VAR: DEPLOY_USER"
|
|
[ -z "$DEPLOY_HOST" ] && echo "MISSING VAR: DEPLOY_HOST"
|
|
[ -z "$DEPLOY_DIRECTORY" ] && echo "MISSING VAR: DEPLOY_DIRECTORY"
|
|
echo "Deploy secrets not fully set, skipping deployment"
|
|
exit 0
|
|
fi
|
|
mkdir -p ~/.ssh
|
|
echo "$DEPLOY_KEY" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" \
|
|
"cd $DEPLOY_DIRECTORY && docker compose pull && docker compose down && docker compose up -d"
|