deploy

.gitea/workflows/deploy.yml

@@ -2,65 +2,42 @@ name: Build & Deploy KLZ Cables
 
 on:
   push:
-    branches:
-      - main
+    branches: [main]
 
 jobs:
   deploy:
-    runs-on: docker
+    runs-on: self-hosted
 
     steps:
-      - name: Checkout repo
-        uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - name: Install tools
+      - name: Login registry
         run: |
-          apt-get update
-          apt-get install -y docker.io openssh-client
+          echo "${{ secrets.REGISTRY_PASS }}" | \
+          docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
 
-      - name: Login to registry
-        env:
-          REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
-          REGISTRY_PASS: ${{ secrets.REGISTRY_PASS }}
-        run: |
-          echo "$REGISTRY_PASS" | docker login registry.infra.mintel.me -u "$REGISTRY_USER" --password-stdin
-
-      - name: Build and push ARM64 image
+      - name: Build image
         run: |
           docker build \
             --pull \
             --build-arg NEXT_PUBLIC_UMAMI_WEBSITE_ID=${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }} \
             --build-arg NEXT_PUBLIC_UMAMI_SCRIPT_URL=${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }} \
             --build-arg NEXT_PUBLIC_SENTRY_DSN=${{ secrets.SENTRY_DSN }} \
-            -t registry.infra.mintel.me/mintel/klz-cables.com:latest \
-            .
+            -t registry.infra.mintel.me/mintel/klz-cables.com:latest .
+
+      - name: Push image
+        run: |
           docker push registry.infra.mintel.me/mintel/klz-cables.com:latest
 
-      - name: Setup SSH
+      - name: Deploy
         run: |
           mkdir -p ~/.ssh
           printf "%s\n" "${{ secrets.ALPHA_SSH_KEY }}" > ~/.ssh/id_ed25519
           chmod 600 ~/.ssh/id_ed25519
           ssh-keyscan -H alpha.mintel.me >> ~/.ssh/known_hosts
 
-      - name: Deploy on server
-        run: |
-          tar czf - docker-compose.yml varnish 2>/dev/null | \
-          ssh -i ~/.ssh/id_ed25519 -o StrictHostKeyChecking=no deploy@alpha.mintel.me '
-            set -e
-            mkdir -p /home/deploy/sites/klz-cables.com/
-            tar xzf - -C /home/deploy/sites/klz-cables.com/
-            cd /home/deploy/sites/klz-cables.com/
-
-            cat > .env << EOF
-          NEXT_PUBLIC_UMAMI_WEBSITE_ID=${{ secrets.NEXT_PUBLIC_UMAMI_WEBSITE_ID }}
-          NEXT_PUBLIC_UMAMI_SCRIPT_URL=${{ secrets.NEXT_PUBLIC_UMAMI_SCRIPT_URL }}
-          SENTRY_DSN=${{ secrets.SENTRY_DSN }}
-          REDIS_URL=${{ secrets.REDIS_URL }}
-          REDIS_KEY_PREFIX=${{ secrets.REDIS_KEY_PREFIX }}
-          EOF
-
-            echo "${{ secrets.REGISTRY_PASS }}" | docker login registry.infra.mintel.me -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+          ssh deploy@alpha.mintel.me '
             docker pull registry.infra.mintel.me/mintel/klz-cables.com:latest
-            docker compose up -d --force-recreate --remove-orphans
-          '
+            cd /home/deploy/sites/klz-cables.com
+            docker compose up -d --force-recreate
+          '