Jakach/jakach-login
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

.gitea/workflows/delpoy.yml aktualisiert
Deploy / deploy (push) Failing after 0s
Details

Browse Source
This commit is contained in:
janis
2026-04-23 18:55:27 +00:00
parent 5dec3ca861
commit e7ab34462d
1 changed files with 53 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/delpoy.yml
+53 -57
View File
@@ -1,63 +1,59 @@
#!/usr/bin/env bash name: Deploy
set -Eeuo pipefail
# Required env vars: on:
# SSH_KEY -> private SSH key content push:
# SSH_USER -> remote SSH user branches: [main]
# SSH_IP -> remote host/IP
# GIT_USER -> Gitea username
# GIT_TOKEN -> Gitea personal access token
#
# Optional env vars:
# APP_DIR -> remote app directory
# GIT_HOST -> git.jakach.ch
# GIT_REPO -> Jakach/your-repo.git
# GIT_BRANCH -> main
: "${SSH_KEY:?SSH_KEY is required}" jobs:
: "${SSH_USER:?SSH_USER is required}" deploy:
: "${SSH_IP:?SSH_IP is required}" runs-on: ubuntu-latest
: "${GIT_USER:?GIT_USER is required}" steps:
: "${GIT_TOKEN:?GIT_TOKEN is required}" - name: Run deploy
env:
SSH_KEY: ${{ secrets.SSH_KEY }}
SSH_USER: ${{ secrets.SSH_USER }}
SSH_IP: ${{ secrets.SSH_IP }}
GIT_USER: ${{ secrets.GIT_USER }}
GIT_TOKEN: ${{ secrets.GIT_TOKEN }}
APP_DIR: /home/deploy/my-app
GIT_REPO: Jakach/my-app.git
GIT_BRANCH: main
run: |
cat > deploy.sh <<'EOF'
#!/usr/bin/env bash
set -Eeuo pipefail
: "${SSH_KEY:?SSH_KEY is required}"
: "${SSH_USER:?SSH_USER is required}"
: "${SSH_IP:?SSH_IP is required}"
: "${GIT_USER:?GIT_USER is required}"
: "${GIT_TOKEN:?GIT_TOKEN is required}"
APP_DIR="/srv/systems/jakach-login" APP_DIR="/srv/systems/jakach-login"
GIT_HOST="${GIT_HOST:-git.jakach.ch}" GIT_HOST="${GIT_HOST:-git.jakach.ch}"
GIT_REPO="${GIT_REPO:-Jakach/jakach-login.git}" GIT_REPO="jakach/jakach-login.git"
GIT_BRANCH="${GIT_BRANCH:-main}" GIT_BRANCH="${GIT_BRANCH:-main}"
mkdir -p ~/.ssh mkdir -p ~/.ssh
chmod 700 ~/.ssh chmod 700 ~/.ssh
printf '%s\n' "$SSH_KEY" | tr -d '\r' > ~/.ssh/deploy_key
chmod 600 ~/.ssh/deploy_key
ssh-keyscan -H "$SSH_IP" >> ~/.ssh/known_hosts 2>/dev/null || true
# Write SSH key ssh -i ~/.ssh/deploy_key \
printf '%s\n' "$SSH_KEY" | tr -d '\r' > ~/.ssh/deploy_key -o StrictHostKeyChecking=yes \
chmod 600 ~/.ssh/deploy_key -o IdentitiesOnly=yes \
"$SSH_USER@$SSH_IP" \
"export APP_DIR='$APP_DIR' GIT_HOST='$GIT_HOST' GIT_REPO='$GIT_REPO' GIT_BRANCH='$GIT_BRANCH' GIT_USER='$GIT_USER' GIT_TOKEN='$GIT_TOKEN'; bash -s" <<'REMOTE'
set -Eeuo pipefail
cd "$APP_DIR"
git remote set-url origin "https://${GIT_USER}:${GIT_TOKEN}@${GIT_HOST}/${GIT_REPO}"
git fetch origin "$GIT_BRANCH"
git checkout "$GIT_BRANCH"
git pull origin "$GIT_BRANCH"
docker compose down
docker compose up -d --build
REMOTE
EOF
# Trust remote host chmod +x deploy.sh
ssh-keyscan -H "$SSH_IP" >> ~/.ssh/known_hosts 2>/dev/null || true ./deploy.sh
ssh -i ~/.ssh/deploy_key \
-o StrictHostKeyChecking=yes \
-o IdentitiesOnly=yes \
"$SSH_USER@$SSH_IP" \
"export APP_DIR='$APP_DIR' GIT_HOST='$GIT_HOST' GIT_REPO='$GIT_REPO' GIT_BRANCH='$GIT_BRANCH' GIT_USER='$GIT_USER' GIT_TOKEN='$GIT_TOKEN'; bash -s" <<'REMOTE'
set -Eeuo pipefail
: "${APP_DIR:?}"
: "${GIT_HOST:?}"
: "${GIT_REPO:?}"
: "${GIT_BRANCH:?}"
: "${GIT_USER:?}"
: "${GIT_TOKEN:?}"
cd "$APP_DIR"
# Ensure origin uses HTTPS with token auth
git remote set-url origin "https://${GIT_USER}:${GIT_TOKEN}@${GIT_HOST}/${GIT_REPO}"
git fetch origin "$GIT_BRANCH"
git checkout "$GIT_BRANCH"
git pull origin "$GIT_BRANCH"
docker compose down
docker compose up -d --build
REMOTE