66 lines
2.3 KiB
YAML
66 lines
2.3 KiB
YAML
name: docker-push
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
jobs:
|
|
build-and-push:
|
|
runs-on: Nexus
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: docker/setup-buildx-action@v3
|
|
- name: Compute image and tags
|
|
run: |
|
|
IMG_NAME="${{ secrets.IMAGE_NAME }}"
|
|
if [ -z "$IMG_NAME" ]; then IMG_NAME="nexus-material"; fi
|
|
echo "IMAGE=${{ secrets.REGISTRY }}/${{ secrets.REGISTRY_NAMESPACE }}/$IMG_NAME" >> $GITHUB_ENV
|
|
echo "SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV
|
|
- uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ secrets.REGISTRY }}
|
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
- uses: docker/build-push-action@v5
|
|
with:
|
|
context: .
|
|
push: true
|
|
tags: |
|
|
${{ env.IMAGE }}:latest
|
|
${{ env.IMAGE }}:${{ env.SHA }}
|
|
deploy:
|
|
runs-on: Nexus
|
|
needs: build-and-push
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- name: Set image ref
|
|
run: |
|
|
IMG_NAME="${{ secrets.IMAGE_NAME }}"
|
|
if [ -z "$IMG_NAME" ]; then IMG_NAME="nexus-material"; fi
|
|
echo "IMAGE_REF=${{ secrets.REGISTRY }}/${{ secrets.REGISTRY_NAMESPACE }}/$IMG_NAME:latest" >> $GITHUB_ENV
|
|
- name: Upload compose to server
|
|
uses: appleboy/scp-action@v0.1.7
|
|
with:
|
|
host: ${{ secrets.DEPLOY_HOST }}
|
|
username: ${{ secrets.DEPLOY_USER }}
|
|
password: ${{ secrets.DEPLOY_PASSWORD }}
|
|
port: ${{ secrets.DEPLOY_PORT || 22 }}
|
|
source: "docker-compose.yml"
|
|
target: "~/nexus_mat"
|
|
- name: Deploy via SSH
|
|
uses: appleboy/ssh-action@v1.0.0
|
|
with:
|
|
host: ${{ secrets.DEPLOY_HOST }}
|
|
username: ${{ secrets.DEPLOY_USER }}
|
|
password: ${{ secrets.DEPLOY_PASSWORD }}
|
|
port: ${{ secrets.DEPLOY_PORT || 22 }}
|
|
script: |
|
|
set -e
|
|
mkdir -p ~/nexus_mat
|
|
cd ~/nexus_mat
|
|
echo "IMAGE_REF=${{ env.IMAGE_REF }}" > .env.compose
|
|
export IMAGE_REF=${{ env.IMAGE_REF }}
|
|
docker login ${{ secrets.REGISTRY }} -u ${{ secrets.REGISTRY_USERNAME }} -p ${{ secrets.REGISTRY_PASSWORD }}
|
|
docker compose pull
|
|
docker compose up -d
|