90 lines
2.6 KiB
YAML
90 lines
2.6 KiB
YAML
# .gitea/workflows/deploy.yml
|
|
# Triggered on push to main.
|
|
# Runs the full CI suite first, then deploys to the production droplet.
|
|
#
|
|
# Required Gitea secrets (Settings → Secrets):
|
|
# DEPLOY_HOST — droplet IP or hostname (e.g. 192.168.1.1)
|
|
# DEPLOY_USER — SSH user (e.g. root)
|
|
# DEPLOY_SSH_KEY — private key contents (the output of: cat ~/.ssh/deploy_key)
|
|
# DEPLOY_PORT — SSH port (usually 22)
|
|
|
|
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
# ── Stage 1: CI ─────────────────────────────────────────────────────────────
|
|
build:
|
|
name: Check & Build
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Node.js
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '20'
|
|
cache: 'npm'
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: JS syntax check
|
|
run: |
|
|
find src -name "*.js" | xargs -I{} node --check {}
|
|
echo "✓ JS syntax OK"
|
|
|
|
- name: Svelte check
|
|
run: npx svelte-check --tsconfig ./jsconfig.json 2>&1 | tail -5
|
|
|
|
- name: Build
|
|
run: npm run build
|
|
env:
|
|
DATABASE_URL: ./dummy.db
|
|
RATE_LIMIT_PUBLISH: '5'
|
|
RATE_LIMIT_READ: '100'
|
|
PUBLIC_BASE_URL: 'https://example.com'
|
|
|
|
# ── Stage 2: Deploy ──────────────────────────────────────────────────────────
|
|
deploy:
|
|
name: Deploy to Production
|
|
runs-on: ubuntu-latest
|
|
needs: build # only runs if build job passes
|
|
|
|
steps:
|
|
- name: Deploy via SSH
|
|
uses: appleboy/ssh-action@v1.0.3
|
|
with:
|
|
host: ${{ secrets.DEPLOY_HOST }}
|
|
username: ${{ secrets.DEPLOY_USER }}
|
|
key: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
port: ${{ secrets.DEPLOY_PORT }}
|
|
script: |
|
|
set -e
|
|
|
|
APP_DIR=/opt/etc-prs/app
|
|
APP_USER=prs
|
|
|
|
echo "▸ Pulling latest code…"
|
|
cd "$APP_DIR"
|
|
git pull
|
|
|
|
echo "▸ Installing dependencies…"
|
|
npm install --quiet
|
|
|
|
echo "▸ Building…"
|
|
npm run build
|
|
|
|
echo "▸ Fixing ownership…"
|
|
chown -R "${APP_USER}:${APP_USER}" "$APP_DIR"
|
|
|
|
echo "▸ Reloading PM2…"
|
|
pm2 reload etc-prs
|
|
|
|
echo "✓ Deploy complete"
|