74 lines
2.0 KiB
YAML
74 lines
2.0 KiB
YAML
name: Build and Deploy
|
|
|
|
# Required secrets
|
|
# DEPLOY_SSH_KEY - private key for the deploy user
|
|
# DEPLOY_HOST - production host, e.g. YOUR_PROD_HOST
|
|
# DEPLOY_USER - ssh user, e.g. deploy
|
|
# DEPLOY_PATH - destination dir, e.g. /var/www/dttmr-fe
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: node:24-bookworm
|
|
steps:
|
|
- name: Install system dependencies
|
|
run: apt-get update && apt-get install -y --no-install-recommends git openssh-client rsync ca-certificates
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Build
|
|
run: npm run build
|
|
|
|
- name: Configure SSH
|
|
env:
|
|
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
printf '%s\n' "$DEPLOY_SSH_KEY" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts
|
|
|
|
- name: Deploy via rsync
|
|
env:
|
|
DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
|
|
DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
|
|
DEPLOY_PATH: ${{ secrets.DEPLOY_PATH }}
|
|
run: |
|
|
rsync -avz --delete \
|
|
-e "ssh -i ~/.ssh/deploy_key -o UserKnownHostsFile=~/.ssh/known_hosts" \
|
|
dist/ "$DEPLOY_USER@$DEPLOY_HOST:$DEPLOY_PATH"
|
|
|
|
sync-dev:
|
|
needs: build-and-deploy
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: node:24-bookworm
|
|
permissions:
|
|
contents: write
|
|
steps:
|
|
- name: Install system dependencies
|
|
run: apt-get update && apt-get install -y --no-install-recommends git
|
|
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Fast-forward dev to main
|
|
run: |
|
|
git fetch origin dev:dev
|
|
git checkout dev
|
|
git merge --ff-only origin/main
|
|
git push origin dev
|