daniel-c-harvey
9bb11e47c7
Four Gitea workflows (deploy-public, deploy-manager, deploy-api, package-install) and a complete deploy/ folder: bootstrap, install, ssh-wrapper, three deploy scripts, setup-step10-creds, three systemd user units, two nginx vhost templates. Models Skipper's deploy infrastructure with key deviations: flat csproj paths, dual PostgreSQL databases, FileDatabase vault directory (never touched on deploy), EF bundle covers DeepDrftContext only (AuthBlocks self-migrates at boot), deploy-api reads DB connection from host credentials not CI args.
87 lines
2.6 KiB
YAML
87 lines
2.6 KiB
YAML
name: Deploy DeepDrftPublic
|
|
|
|
on:
|
|
push:
|
|
branches: [master, dev]
|
|
paths:
|
|
- 'DeepDrftPublic/**'
|
|
- 'DeepDrftPublic.Client/**'
|
|
- 'DeepDrftShared.Client/**'
|
|
- 'DeepDrftModels/**'
|
|
- '.gitea/workflows/deploy-public.yml'
|
|
|
|
jobs:
|
|
build:
|
|
name: Build & Publish
|
|
runs-on: ubuntu-24.04
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: '10.0.x'
|
|
|
|
- name: Install wasm-tools workload
|
|
run: dotnet workload install wasm-tools
|
|
|
|
# No test project scoped to DeepDrftPublic — add one and wire it here when ready.
|
|
|
|
- name: Publish (self-contained linux-x64)
|
|
run: |
|
|
dotnet publish DeepDrftPublic/DeepDrftPublic.csproj \
|
|
-c Release \
|
|
-r linux-x64 \
|
|
--self-contained \
|
|
-o DeepDrftPublic/publish
|
|
|
|
- name: Package
|
|
run: tar -czf deepdrft-public.tar.gz -C DeepDrftPublic/publish .
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v3
|
|
with:
|
|
name: deepdrft-public
|
|
path: deepdrft-public.tar.gz
|
|
retention-days: 1
|
|
|
|
deploy:
|
|
name: Deploy
|
|
needs: build
|
|
runs-on: ubuntu-24.04
|
|
if: github.event_name == 'push' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/dev')
|
|
env:
|
|
DEPLOY_HOST: ${{ github.ref == 'refs/heads/master' && 'prod.cerebellumsoftworks.com' || 'dch7.cerebellumsoftworks.com' }}
|
|
steps:
|
|
- name: Download artifact
|
|
uses: actions/download-artifact@v3
|
|
with:
|
|
name: deepdrft-public
|
|
|
|
- name: Install SSH tooling
|
|
run: apt-get update && apt-get install -y --no-install-recommends openssh-client rsync
|
|
|
|
- name: Configure SSH
|
|
env:
|
|
PROD_KEY: ${{ secrets.DEEPDRFT_PROD_SSH_DEPLOY }}
|
|
BETA_KEY: ${{ secrets.DEEPDRFT_DCH7_SSH_DEPLOY }}
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
if [ "$DEPLOY_HOST" = "prod.cerebellumsoftworks.com" ]; then
|
|
echo "$PROD_KEY" > ~/.ssh/deepdrft_ed25519
|
|
else
|
|
echo "$BETA_KEY" > ~/.ssh/deepdrft_ed25519
|
|
fi
|
|
chmod 600 ~/.ssh/deepdrft_ed25519
|
|
ssh-keyscan -H "$DEPLOY_HOST" >> ~/.ssh/known_hosts || { echo "ssh-keyscan failed for $DEPLOY_HOST"; exit 1; }
|
|
|
|
- name: Rsync archive to staging
|
|
run: |
|
|
rsync -e "ssh -i ~/.ssh/deepdrft_ed25519 -o StrictHostKeyChecking=yes" \
|
|
deepdrft-public.tar.gz \
|
|
deepdrft@$DEPLOY_HOST:
|
|
|
|
- name: Trigger deploy on host
|
|
run: |
|
|
ssh -i ~/.ssh/deepdrft_ed25519 -o StrictHostKeyChecking=yes \
|
|
deepdrft@$DEPLOY_HOST deploy-public
|