UPdate workflow

.github/workflows/deploy.yml

@@ -1,49 +1,57 @@
-name: Deploy to Media Server
+name: Deploy Media Server
-
 on:
   push:
-    branches: [ master ]
+    branches: [ "master" ]
-  workflow_dispatch:
+  workflow_dispatch: {}
-
+permissions:
+  contents: read
+concurrency:
+  group: deploy-media-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
-  deploy:
+  build:
     runs-on: ubuntu-latest
-    
     steps:
-    - uses: actions/checkout@v3
+      - name: Checkout
-    
+        uses: actions/checkout@v4
       - name: Setup .NET
-      uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '8.0.x'
-    
+      - name: Restore
-    - name: Restore dependencies
         run: dotnet restore
-    
-    - name: Build
-      run: dotnet build --configuration Release --no-restore
-    
       - name: Publish
-      run: dotnet publish --configuration Release --no-build --output ./publish
+        run: dotnet publish -c Release -o ./publish
-    
+      - name: Upload artifact
-    - name: Deploy to nginx server
+        uses: actions/upload-artifact@v4
-      uses: appleboy/scp-action@master
         with:
-        host: joshheaps.net
+          name: media-publish
-        username: deploy
+          path: ./publish
-        key: ${{ secrets.NGINX_SSH_KEY }}
+  deploy:
-        source: "publish/*"
+    needs: build
-        target: "/tmp/media-app-deploy"
+    runs-on: ubuntu-latest
-        strip_components: 1
+    environment: production
-    
+    steps:
+      - name: Download artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: media-publish
+          path: publish
+      - name: Prepare SSH
+        run: |
+          install -m 700 -d ~/.ssh
+          echo "${{ secrets.MEDIA_SSH_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          ssh-keyscan -p "${{ secrets.SSH_PORT || 22 }}" "${{ secrets.SSH_HOST }}" >> ~/.ssh/known_hosts
+      - name: Rsync to nginx server
+        run: |
+          rsync -az --delete -e "ssh -p ${{ secrets.SSH_PORT || 22 }} -i ~/.ssh/id_rsa" \
+            publish/ ${{ secrets.MEDIA_DEPLOY_USER }}@${{ secrets.SSH_HOST }}:/tmp/media-app-deploy/
       - name: Copy to media server and restart
-      uses: appleboy/ssh-action@master
+        run: |
-      with:
+          ssh -i ~/.ssh/id_rsa -p "${{ secrets.SSH_PORT || 22 }}" \
-        host: joshheaps.net
+            ${{ secrets.MEDIA_DEPLOY_USER }}@${{ secrets.SSH_HOST }} \
-        username: deploy
+            "ssh [email protected] 'mkdir -p /tmp/media-app-temp' && \
-        key: ${{ secrets.NGINX_SSH_KEY }}
+             scp -r /tmp/media-app-deploy/* [email protected]:/tmp/media-app-temp/ && \
-        script: |
+             ssh [email protected] 'sudo rsync -av --delete /tmp/media-app-temp/ /var/www/media-app/ && sudo systemctl restart media-app && rm -rf /tmp/media-app-temp' && \
-          ssh -o StrictHostKeyChecking=no [email protected] "mkdir -p /tmp/media-app-temp"
+             rm -rf /tmp/media-app-deploy"
-          scp -o StrictHostKeyChecking=no -r /tmp/media-app-deploy/* [email protected]:/tmp/media-app-temp/
-          ssh -o StrictHostKeyChecking=no [email protected] "sudo rsync -av --delete /tmp/media-app-temp/ /var/www/media-app/ && sudo systemctl restart media-app && rm -rf /tmp/media-app-temp"
-          rm -rf /tmp/media-app-deploy