Files
aperisolve/.github/workflows/deployement.yml
T
2026-01-04 23:52:17 +01:00

81 lines
2.4 KiB
YAML

name: Deploy to production
on:
push:
tags:
- '*'
jobs:
check-branch:
runs-on: ubuntu-latest
outputs:
is_prod: ${{ steps.check.outputs.is_prod }}
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Check if tag is from prod branch
id: check
run: |
BRANCHES=$(git branch -r --contains ${{ github.ref }})
if echo "$BRANCHES" | grep -q "origin/prod"; then
echo "is_prod=true" >> $GITHUB_OUTPUT
echo "✅ Tag is from prod branch"
else
echo "is_prod=false" >> $GITHUB_OUTPUT
echo "❌ Tag is NOT from prod branch - skipping deployment"
fi
deploy:
needs: check-branch
if: needs.check-branch.outputs.is_prod == 'true'
runs-on: ubuntu-latest
environment: prod
steps:
- name: Deploy to production server
uses: appleboy/ssh-action@v1.0.3
with:
host: ${{ secrets.PROD_SSH_HOST }}
username: ${{ secrets.PROD_SSH_USER }}
key: ${{ secrets.PROD_SSH_KEY }}
script: |
set -e
cd /root/AperiSolve
# update code
git pull
# create .env
cat <<EOF > .env
MAX_CONTENT_LENGTH=${{ vars.MAX_CONTENT_LENGTH }}
MAX_PENDING_TIME=${{ vars.MAX_PENDING_TIME }}
MAX_STORE_TIME=${{ vars.MAX_STORE_TIME }}
CLEAR_AT_RESTART=${{ vars.CLEAR_AT_RESTART }}
SKIP_IHDR_FILL=${{ vars.SKIP_IHDR_FILL }}
FLASK_DEBUG=${{ vars.FLASK_DEBUG }}
FLASK_ENV=${{ vars.FLASK_ENV }}
RQ_DASHBOARD_REDIS_URL=${{ secrets.REDIS_URL }}
POSTGRES_USER=${{ secrets.POSTGRES_USER }}
POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
POSTGRES_DB=${{ secrets.POSTGRES_DB }}
DB_URI=${{ secrets.DATABASE_URL }}
SENTRY_DSN=${{ secrets.SENTRY_DSN }}
SENTRY_TRACES_SAMPLE_RATE=${{ secrets.SENTRY_TRACES_SAMPLE_RATE }}
SENTRY_PROFILES_SAMPLE_RATE=${{ secrets.SENTRY_PROFILES_SAMPLE_RATE }}
SENTRY_RELEASE=${{ secrets.SENTRY_RELEASE }}
SENTRY_ENVIRONMENT=${{ secrets.SENTRY_ENVIRONMENT }}
EOF
# Pull images and deploy
docker compose pull
docker compose down
docker compose up -d
docker image prune -f