Compare commits
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
17160c6cb6 | ||
|
|
f27b785882 |
@@ -1,88 +0,0 @@
|
||||
name: Deploy to Staging
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [ dev ]
|
||||
|
||||
concurrency:
|
||||
group: staging-${{ github.repository }}
|
||||
cancel-in-progress: false
|
||||
|
||||
jobs:
|
||||
build-and-deploy:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout Code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
with:
|
||||
driver-opts: network=host
|
||||
|
||||
- name: Generate Version
|
||||
id: version
|
||||
run: echo "VERSION=1.0.0-dev.${{ github.run_number }}" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Build Docker Image
|
||||
env:
|
||||
IMAGE_NAME: ${{ vars.SERVICE_NAME || github.event.repository.name }}
|
||||
VERSION: ${{ steps.version.outputs.VERSION }}
|
||||
run: |
|
||||
docker build \
|
||||
--tag ${{ secrets.NEXUS_REGISTRY }}/$IMAGE_NAME:$VERSION \
|
||||
--tag ${{ secrets.NEXUS_REGISTRY }}/$IMAGE_NAME:1.0.0-latest \
|
||||
--build-arg NEXUS_REGISTRY=${{ secrets.NEXUS_REGISTRY }} \
|
||||
.
|
||||
|
||||
- name: Login to Nexus
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: ${{ secrets.NEXUS_REGISTRY }}
|
||||
username: ${{ secrets.NEXUS_USER }}
|
||||
password: ${{ secrets.NEXUS_PASS }}
|
||||
|
||||
- name: Push to Nexus
|
||||
env:
|
||||
IMAGE_NAME: ${{ vars.SERVICE_NAME || github.event.repository.name }}
|
||||
VERSION: ${{ steps.version.outputs.VERSION }}
|
||||
run: |
|
||||
docker push ${{ secrets.NEXUS_REGISTRY }}/$IMAGE_NAME:$VERSION
|
||||
docker push ${{ secrets.NEXUS_REGISTRY }}/$IMAGE_NAME:1.0.0-latest
|
||||
|
||||
- name: Deploy to Staging
|
||||
env:
|
||||
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
|
||||
STAGING_HOST: ${{ secrets.STAGING_HOST }}
|
||||
STAGING_USER: ${{ secrets.STAGING_USER }}
|
||||
IMAGE_NAME: ${{ vars.SERVICE_NAME || github.event.repository.name }}
|
||||
VERSION: ${{ steps.version.outputs.VERSION }}
|
||||
run: |
|
||||
mkdir -p ~/.ssh
|
||||
echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_rsa
|
||||
chmod 600 ~/.ssh/id_rsa
|
||||
ssh-keyscan -H $STAGING_HOST >> ~/.ssh/known_hosts
|
||||
|
||||
ssh $STAGING_USER@$STAGING_HOST "
|
||||
cd /srv/staging/narng-platform/compose
|
||||
docker compose pull $IMAGE_NAME
|
||||
export ${IMAGE_NAME}_TAG=$VERSION
|
||||
docker compose up -d $IMAGE_NAME
|
||||
"
|
||||
|
||||
- name: Wait for Health Check
|
||||
env:
|
||||
IMAGE_NAME: ${{ vars.SERVICE_NAME || github.event.repository.name }}
|
||||
run: sleep 15
|
||||
|
||||
- name: Run Smoke Test
|
||||
env:
|
||||
STAGING_HOST: ${{ secrets.STAGING_HOST }}
|
||||
run: |
|
||||
STATUS=$(curl -sk -o /dev/null -w "%{http_code}" https://api.$STAGING_HOST/api/categories || echo "000")
|
||||
if [ "$STATUS" != "200" ]; then
|
||||
echo "Smoke test failed with status $STATUS"
|
||||
exit 1
|
||||
fi
|
||||
echo "Smoke test passed!"
|
||||
|
||||
@@ -1,111 +0,0 @@
|
||||
name: Central Deploy
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
repo_name:
|
||||
description: 'Repository to build and deploy (e.g., narng-api)'
|
||||
required: true
|
||||
type: string
|
||||
branch:
|
||||
description: 'Branch to deploy'
|
||||
required: true
|
||||
default: 'dev'
|
||||
type: string
|
||||
|
||||
env:
|
||||
REGISTRY: 192.168.1.8:8084
|
||||
COMPOSE_PATH: /srv/staging/narng-platform/compose
|
||||
ORG: narng-platform
|
||||
|
||||
jobs:
|
||||
build-and-deploy:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout service code
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: ${{ env.ORG }}/${{ inputs.repo_name }}
|
||||
ref: ${{ inputs.branch }}
|
||||
token: ${{ secrets.NARNG_GIT_TOKEN }}
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Detect service metadata
|
||||
id: meta
|
||||
run: |
|
||||
REPO_NAME="${{ inputs.repo_name }}"
|
||||
case "$REPO_NAME" in
|
||||
narng-api-laravel) SERVICE="laravel"; TAG_VAR="LARAVEL_TAG" ;;
|
||||
narng-api|narng-api-gateway) SERVICE="api"; TAG_VAR="API_TAG" ;;
|
||||
narng-web-app) SERVICE="web"; TAG_VAR="WEB_TAG" ;;
|
||||
*)
|
||||
SERVICE=$(echo "$REPO_NAME" | sed 's/^narng-//')
|
||||
TAG_VAR=$(echo "$SERVICE" | tr '[:lower:]' '[:upper:]')_TAG
|
||||
;;
|
||||
esac
|
||||
echo "service=$SERVICE" >> $GITHUB_OUTPUT
|
||||
echo "tag_var=$TAG_VAR" >> $GITHUB_OUTPUT
|
||||
echo "image=${{ env.REGISTRY }}/${{ env.ORG }}/$REPO_NAME" >> $GITHUB_OUTPUT
|
||||
echo "version=1.0.0-dev.${{ github.run_number }}" >> $GITHUB_OUTPUT
|
||||
|
||||
- name: Prepare SSH key
|
||||
env:
|
||||
STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
|
||||
run: |
|
||||
echo "$STAGING_SSH_KEY" > /tmp/deploy_key_raw
|
||||
if head -1 /tmp/deploy_key_raw | grep -q "BEGIN OPENSSH PRIVATE KEY"; then
|
||||
cp /tmp/deploy_key_raw /tmp/deploy_key
|
||||
else
|
||||
base64 -d /tmp/deploy_key_raw > /tmp/deploy_key
|
||||
fi
|
||||
chmod 600 /tmp/deploy_key
|
||||
ssh-keygen -l -f /tmp/deploy_key || { echo "ERROR: Invalid SSH key"; exit 1; }
|
||||
|
||||
- name: Login to Nexus
|
||||
run: echo "${{ secrets.NEXUS_PASS }}" | docker login ${{ env.REGISTRY }} -u "${{ secrets.NEXUS_USER }}" --password-stdin
|
||||
|
||||
- name: Build Docker image
|
||||
env:
|
||||
DOCKER_BUILDKIT: 1
|
||||
run: |
|
||||
IMAGE=${{ steps.meta.outputs.image }}
|
||||
VERSION=${{ steps.meta.outputs.version }}
|
||||
docker buildx build \
|
||||
--builder default \
|
||||
--no-cache \
|
||||
--tag "$IMAGE:$VERSION" \
|
||||
--tag "$IMAGE:1.0.0-latest" \
|
||||
--load . 2>&1 | tail -30
|
||||
|
||||
- name: Push to Nexus
|
||||
run: |
|
||||
IMAGE=${{ steps.meta.outputs.image }}
|
||||
VERSION=${{ steps.meta.outputs.version }}
|
||||
docker push "$IMAGE:$VERSION"
|
||||
docker push "$IMAGE:1.0.0-latest"
|
||||
|
||||
- name: Deploy to staging via SSH
|
||||
uses: appleboy/ssh-action@v1.0.3
|
||||
env:
|
||||
NEXUS_USER: ${{ secrets.NEXUS_USER }}
|
||||
NEXUS_PASS: ${{ secrets.NEXUS_PASS }}
|
||||
SERVICE: ${{ steps.meta.outputs.service }}
|
||||
VERSION: ${{ steps.meta.outputs.version }}
|
||||
TAG_VAR: ${{ steps.meta.outputs.tag_var }}
|
||||
REGISTRY: ${{ env.REGISTRY }}
|
||||
COMPOSE_PATH: ${{ env.COMPOSE_PATH }}
|
||||
with:
|
||||
host: ${{ secrets.STAGING_HOST }}
|
||||
username: ${{ secrets.STAGING_USER }}
|
||||
key_path: /tmp/deploy_key
|
||||
port: 2222
|
||||
envs: NEXUS_USER,NEXUS_PASS,SERVICE,VERSION,TAG_VAR,REGISTRY,COMPOSE_PATH
|
||||
script: |
|
||||
set -ex
|
||||
echo "Deploying $SERVICE:$VERSION"
|
||||
echo "$NEXUS_PASS" | docker login "$REGISTRY" -u "$NEXUS_USER" --password-stdin
|
||||
sed -i "s|^${TAG_VAR}=.*|${TAG_VAR}=${VERSION}|" "$COMPOSE_PATH/.env"
|
||||
cd "$COMPOSE_PATH"
|
||||
docker compose pull "$SERVICE"
|
||||
docker compose up -d --force-recreate --no-deps "$SERVICE"
|
||||
docker image prune -f
|
||||
echo "✅ $SERVICE:$VERSION deployed"
|
||||
@@ -1,25 +0,0 @@
|
||||
name: Test SSH Connection
|
||||
on:
|
||||
workflow_dispatch:
|
||||
|
||||
jobs:
|
||||
test:
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Test SSH
|
||||
env:
|
||||
STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
|
||||
STAGING_HOST: ${{ secrets.STAGING_HOST }}
|
||||
STAGING_USER: ${{ secrets.STAGING_USER }}
|
||||
run: |
|
||||
echo "$STAGING_SSH_KEY" > /tmp/key_raw
|
||||
if head -1 /tmp/key_raw | grep -q "BEGIN OPENSSH"; then
|
||||
cp /tmp/key_raw /tmp/key
|
||||
else
|
||||
base64 -d /tmp/key_raw > /tmp/key
|
||||
fi
|
||||
chmod 600 /tmp/key
|
||||
echo "=== Key fingerprint ==="
|
||||
ssh-keygen -l -f /tmp/key
|
||||
echo "=== SSH Test ==="
|
||||
ssh -i /tmp/key -p 2222 -o StrictHostKeyChecking=no $STAGING_USER@$STAGING_HOST "echo SSH_OK && docker ps --format '{{.Names}}' | head -3"
|
||||
@@ -1,5 +0,0 @@
|
||||
node_modules/
|
||||
test-results/
|
||||
playwright-report/
|
||||
.env
|
||||
*.log
|
||||
@@ -1,18 +0,0 @@
|
||||
Narng CI/CD
|
||||
این ریپو حاوی کانفیگها و اسکریپتهای مرکزی CI/CD برای پروژه Narng است.
|
||||
|
||||
ساختار
|
||||
.gitea/workflows/deploy-staging.yml: Pipeline اصلی برای Deploy به Staging (شاخه dev).
|
||||
scripts/: اسکریپتهای کمکی برای Deploy.
|
||||
نحوه استفاده
|
||||
برای فعالسازی این Pipeline در یک سرویس (مثلاً narng-auth):
|
||||
|
||||
فایل .gitea/workflows/deploy-staging.yml را در ریپو سرویس ایجاد کنید.
|
||||
در صورت نیاز، متغیر SERVICE_NAME را در تنظیمات ریپو سرویس تنظیم کنید.
|
||||
در صورت نیاز، Secrets زیر را در ریپو سرویس تنظیم کنید:
|
||||
NEXUS_REGISTRY: آدرس Registry (مثلاً 192.168.1.8:8084)
|
||||
NEXUS_USER: کاربری Nexus
|
||||
NEXUS_PASS: پسورد Nexus
|
||||
SSH_PRIVATE_KEY: کلید خصوصی SSH برای دسترسی به سرور
|
||||
STAGING_HOST: آدرس سرور Staging
|
||||
STAGING_USER: کاربری سرور (مثلاً root)
|
||||
Reference in New Issue
Block a user