85 lines
2.7 KiB
YAML
85 lines
2.7 KiB
YAML
name: Deploy to production
|
|
|
|
on:
|
|
workflow_run:
|
|
workflows:
|
|
- Docker Image CI
|
|
types:
|
|
- completed
|
|
|
|
jobs:
|
|
check-and-deploy:
|
|
if: ${{ github.event.workflow_run.conclusion == 'success' }}
|
|
runs-on: ubuntu-latest
|
|
environment: production
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
ref: ${{ github.event.workflow_run.head_sha }}
|
|
fetch-depth: 0
|
|
|
|
- name: Check if tag is from prod branch
|
|
id: check
|
|
run: |
|
|
TAG_REF="${{ github.event.workflow_run.head_branch }}"
|
|
echo "Tag/Branch: $TAG_REF"
|
|
|
|
# Récupère les branches contenant ce commit
|
|
BRANCHES=$(git branch -r --contains ${{ github.event.workflow_run.head_sha }})
|
|
echo "Branches containing this commit: $BRANCHES"
|
|
|
|
if echo "$BRANCHES" | grep -q "origin/prod"; then
|
|
echo "is_prod=true" >> $GITHUB_OUTPUT
|
|
echo "✅ Tag is from prod branch - will deploy"
|
|
else
|
|
echo "is_prod=false" >> $GITHUB_OUTPUT
|
|
echo "❌ Tag is not from prod branch - skipping deployment"
|
|
fi
|
|
|
|
- name: Deploy to production server
|
|
if: steps.check.outputs.is_prod == 'true'
|
|
uses: appleboy/ssh-action@v1.0.3
|
|
with:
|
|
host: ${{ secrets.PROD_SSH_HOST }}
|
|
username: ${{ secrets.PROD_SSH_USER }}
|
|
key: ${{ secrets.PROD_SSH_KEY }}
|
|
script: |
|
|
set -e
|
|
cd /root/AperiSolve
|
|
|
|
# update code
|
|
git pull
|
|
|
|
# create .env
|
|
cat <<EOF > .env
|
|
MAX_CONTENT_LENGTH=${{ vars.MAX_CONTENT_LENGTH }}
|
|
MAX_PENDING_TIME=${{ vars.MAX_PENDING_TIME }}
|
|
MAX_STORE_TIME=${{ vars.MAX_STORE_TIME }}
|
|
CLEAR_AT_RESTART=${{ vars.CLEAR_AT_RESTART }}
|
|
SKIP_IHDR_FILL=${{ vars.SKIP_IHDR_FILL }}
|
|
|
|
FLASK_DEBUG=${{ vars.FLASK_DEBUG }}
|
|
FLASK_ENV=${{ vars.FLASK_ENV }}
|
|
|
|
RQ_DASHBOARD_REDIS_URL=${{ secrets.REDIS_URL }}
|
|
|
|
POSTGRES_USER=${{ secrets.POSTGRES_USER }}
|
|
POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}
|
|
POSTGRES_DB=${{ secrets.POSTGRES_DB }}
|
|
DB_URI=${{ secrets.DATABASE_URL }}
|
|
|
|
SENTRY_DSN=${{ secrets.SENTRY_DSN }}
|
|
SENTRY_TRACES_SAMPLE_RATE=${{ secrets.SENTRY_TRACES_SAMPLE_RATE }}
|
|
SENTRY_PROFILES_SAMPLE_RATE=${{ secrets.SENTRY_PROFILES_SAMPLE_RATE }}
|
|
SENTRY_RELEASE=${{ secrets.SENTRY_RELEASE }}
|
|
SENTRY_ENVIRONMENT=${{ secrets.SENTRY_ENVIRONMENT }}
|
|
EOF
|
|
|
|
# Pull images and deploy
|
|
docker compose pull
|
|
docker compose down
|
|
docker compose up -d
|
|
docker image prune -f
|