jbrechtel
f9ee6240c3
Build and Deploy / build-and-deploy (push) Failing after 1m39s
- Dockerfile: production image for roux-server (Debian slim, tini, binary) - docker-compose.yml: production compose with recipe/data volume mounts - .gitea/workflows/deploy.yaml: Gitea Actions pipeline that builds, tests, pushes Docker image, and deploys via SSH Follows the same pattern used by the Atlas project.
90 lines
3.2 KiB
YAML
90 lines
3.2 KiB
YAML
name: Build and Deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install Stack
|
|
run: |
|
|
curl -sSL https://get.haskellstack.org/ | sh
|
|
echo "$HOME/.local/bin" >> $GITHUB_PATH
|
|
|
|
- name: Cache Stack root
|
|
uses: actions/cache@v4
|
|
with:
|
|
path: ~/.stack
|
|
key: stack-${{ hashFiles('stack.yaml', 'package.yaml') }}
|
|
restore-keys: stack-
|
|
|
|
- name: Install fourmolu
|
|
run: |
|
|
FOURMOLU_URL=https://github.com/fourmolu/fourmolu/releases/download/v0.19.0.1/fourmolu-0.19.0.1-linux-x86_64
|
|
curl -fsSL "$FOURMOLU_URL" -o /usr/local/bin/fourmolu
|
|
chmod +x /usr/local/bin/fourmolu
|
|
|
|
- name: Check formatting
|
|
run: fourmolu --mode check app/ src/ test/
|
|
|
|
- name: Lint
|
|
run: stack exec -- hlint app/ src/ test/
|
|
|
|
- name: Build
|
|
run: stack build --copy-bins --local-bin-path ./dist
|
|
|
|
- name: Run tests
|
|
run: stack test
|
|
|
|
- name: Login to Gitea Container Registry
|
|
env:
|
|
CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
|
|
run: |
|
|
if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
|
|
echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
|
|
exit 0
|
|
fi
|
|
echo "$CONTAINER_REGISTRY_TOKEN" | docker login git.roo.lol -u ${{ github.actor }} --password-stdin
|
|
|
|
- name: Build and push Docker image
|
|
env:
|
|
CONTAINER_REGISTRY_TOKEN: ${{ secrets.CONTAINER_REGISTRY_TOKEN }}
|
|
run: |
|
|
if [ -z "$CONTAINER_REGISTRY_TOKEN" ]; then
|
|
echo "CONTAINER_REGISTRY_TOKEN not set, skipping Docker publish"
|
|
exit 0
|
|
fi
|
|
cp ./dist/roux-server .
|
|
docker build \
|
|
-t git.roo.lol/${{ github.repository }}:latest \
|
|
-t git.roo.lol/${{ github.repository }}:${{ github.sha }} \
|
|
.
|
|
docker push git.roo.lol/${{ github.repository }}:latest
|
|
docker push git.roo.lol/${{ github.repository }}:${{ github.sha }}
|
|
|
|
- name: Deploy to production
|
|
env:
|
|
DEPLOY_KEY: ${{ secrets.DEPLOY_KEY }}
|
|
DEPLOY_USER: ${{ vars.DEPLOY_USER }}
|
|
DEPLOY_HOST: ${{ vars.DEPLOY_HOST }}
|
|
DEPLOY_DIRECTORY: ${{ vars.DEPLOY_DIRECTORY }}
|
|
run: |
|
|
if [ -z "$DEPLOY_KEY" ] || [ -z "$DEPLOY_USER" ] || [ -z "$DEPLOY_HOST" ] || [ -z "$DEPLOY_DIRECTORY" ]; then
|
|
[ -z "$DEPLOY_KEY" ] && echo "MISSING SECRET: DEPLOY_KEY"
|
|
[ -z "$DEPLOY_USER" ] && echo "MISSING VAR: DEPLOY_USER"
|
|
[ -z "$DEPLOY_HOST" ] && echo "MISSING VAR: DEPLOY_HOST"
|
|
[ -z "$DEPLOY_DIRECTORY" ] && echo "MISSING VAR: DEPLOY_DIRECTORY"
|
|
echo "Deploy secrets not fully set, skipping deployment"
|
|
exit 0
|
|
fi
|
|
mkdir -p ~/.ssh
|
|
echo "$DEPLOY_KEY" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
ssh -o StrictHostKeyChecking=accept-new -i ~/.ssh/deploy_key "$DEPLOY_USER@$DEPLOY_HOST" \
|
|
"cd $DEPLOY_DIRECTORY && docker compose pull && docker compose down && docker compose up -d"
|