45 lines
1.4 KiB
YAML
45 lines
1.4 KiB
YAML
# Deploy na single server: deploy.sh volá hostovský Docker přes /var/run/docker.sock (bez DinD).
|
|
#
|
|
# Job běží v kontejneru — /opt/ems-deploy a sock musí být přimountované (viz container.volumes).
|
|
# V /opt/gitea-stack/runner/config.yaml nastav container.valid_volumes na stejné cesty.
|
|
# Sladit `runs-on` s labely registrace runneru (výchozí: self-hosted).
|
|
#
|
|
# Spuštění: push na větev main (včetně merge PR do main — merge v Gitea/Git je stále push na main).
|
|
# Nepřidávat paralelně pull_request:closed — při merge by běžel deploy dvakrát (push + PR).
|
|
|
|
name: deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: self-hosted
|
|
steps:
|
|
- name: Show execution context
|
|
run: |
|
|
whoami
|
|
hostname
|
|
pwd
|
|
ls -ld /opt/ems-deploy
|
|
|
|
- name: Run deploy script
|
|
run: |
|
|
bash /opt/ems-deploy/deploy.sh
|
|
|
|
# Alternativa: runner v Dockeru bez přístupu k hostu — odkomentovat a upravit SERVER + secrets.
|
|
# deploy-ssh:
|
|
# runs-on: ubuntu-latest
|
|
# steps:
|
|
# - name: Deploy over SSH
|
|
# env:
|
|
# SSH_PRIVATE_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
# run: |
|
|
# mkdir -p ~/.ssh
|
|
# printf '%s\n' "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
|
|
# chmod 600 ~/.ssh/id_ed25519
|
|
# ssh -o StrictHostKeyChecking=yes -i ~/.ssh/id_ed25519 deploy@SERVER '/opt/ems-deploy/deploy.sh'
|