115 lines
4.4 KiB
YAML
115 lines
4.4 KiB
YAML
name: Build and Deploy Backend
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- '*'
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to Gitea Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: git.uvpn.shop
|
|
username: ${{ gitea.repository_owner }}
|
|
password: ${{ secrets.ACCESS_TOKEN }}
|
|
|
|
# Преобразуем имена в нижний регистр и собираем метаданные
|
|
- name: Prepare metadata
|
|
id: meta
|
|
run: |
|
|
OWNER=$(echo "${{ gitea.repository_owner }}" | tr '[:upper:]' '[:lower:]')
|
|
REPO=$(echo "${{ github.event.repository.name }}" | tr '[:upper:]' '[:lower:]')
|
|
|
|
echo "owner=$OWNER" >> $GITHUB_OUTPUT
|
|
echo "repo=$REPO" >> $GITHUB_OUTPUT
|
|
echo "image=git.uvpn.shop/$OWNER/$REPO" >> $GITHUB_OUTPUT
|
|
echo "source=https://git.uvpn.shop/${{ gitea.repository }}" >> $GITHUB_OUTPUT
|
|
|
|
# Формируем дату
|
|
echo "build_date=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
|
|
|
|
- name: Build and push Docker image
|
|
uses: docker/build-push-action@v5
|
|
with:
|
|
context: .
|
|
push: true
|
|
tags: |
|
|
${{ steps.meta.outputs.image }}:latest
|
|
${{ steps.meta.outputs.image }}:${{ gitea.ref_name }}
|
|
build-args: |
|
|
BUILD_VERSION=${{ gitea.ref_name }}
|
|
BUILD_DATE=${{ steps.meta.outputs.build_date }}
|
|
VCS_REF=${{ github.sha }}
|
|
GITEA_REPOSITORY=${{ steps.meta.outputs.source }}
|
|
|
|
- name: Create Gitea Release via API
|
|
run: |
|
|
TAG_MESSAGE=$(git tag -l --format='%(contents)' "${{ gitea.ref_name }}" 2>/dev/null || echo "Автоматический релиз через CI/CD")
|
|
TAG_MESSAGE_ESCAPED=$(echo "$TAG_MESSAGE" | sed 's/"/\\"/g' | awk '{printf "%s\\n", $0}')
|
|
|
|
JSON_PAYLOAD=$(cat <<EOF
|
|
{
|
|
"tag_name": "${{ gitea.ref_name }}",
|
|
"name": "Release ${{ gitea.ref_name }}",
|
|
"body": "## Релиз ${{ gitea.ref_name }}\n\n📝 ${TAG_MESSAGE_ESCAPED}\n\n---\n\n**🏷️ Тег:** \`${{ gitea.ref_name }}\`\n**👤 Автор:** @${{ gitea.actor }}\n**📦 Образ:** \`${{ steps.meta.outputs.image }}:${{ gitea.ref_name }}\`\n\n✅ Автоматически собрано и развёрнуто",
|
|
"draft": false,
|
|
"prerelease": false
|
|
}
|
|
EOF
|
|
)
|
|
|
|
RESPONSE=$(curl -s -w "\n%{http_code}" \
|
|
-X POST \
|
|
-H "Authorization: token ${{ secrets.ACCESS_TOKEN }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d "$JSON_PAYLOAD" \
|
|
"https://git.uvpn.shop/api/v1/repos/${{ gitea.repository }}/releases")
|
|
|
|
HTTP_CODE=$(echo "$RESPONSE" | tail -n1)
|
|
BODY=$(echo "$RESPONSE" | sed '$d')
|
|
|
|
if [ "$HTTP_CODE" -eq 201 ]; then
|
|
echo "✅ Релиз успешно создан!"
|
|
echo "$BODY" | jq '.'
|
|
elif [ "$HTTP_CODE" -eq 409 ]; then
|
|
echo "⚠️ Релиз с таким тегом уже существует, пропускаем"
|
|
else
|
|
echo "❌ Ошибка создания релиза (HTTP $HTTP_CODE)"
|
|
echo "$BODY"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Install SSH key
|
|
uses: webfactory/ssh-agent@v0.9.0
|
|
with:
|
|
ssh-private-key: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
|
|
- name: Deploy on server
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=no ${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }} << 'EOF'
|
|
cd /opt/uvpn.shop/backend
|
|
|
|
echo "${{ secrets.ACCESS_TOKEN }}" | docker login git.uvpn.shop -u ${{ gitea.repository_owner }} --password-stdin
|
|
|
|
# Используем образ с правильным именем в нижнем регистре
|
|
export IMAGE_NAME="${{ steps.meta.outputs.image }}"
|
|
|
|
docker compose pull
|
|
docker compose down || true
|
|
docker compose up -d
|
|
docker image prune -f
|
|
docker compose ps
|
|
EOF |