57 lines
2.0 KiB
YAML
57 lines
2.0 KiB
YAML
name: Deploy Media Server
|
|
on:
|
|
push:
|
|
branches: [ "master" ]
|
|
workflow_dispatch: {}
|
|
permissions:
|
|
contents: read
|
|
concurrency:
|
|
group: deploy-media-${{ github.ref }}
|
|
cancel-in-progress: true
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
- name: Setup .NET
|
|
uses: actions/setup-dotnet@v4
|
|
with:
|
|
dotnet-version: '8.0.x'
|
|
- name: Restore
|
|
run: dotnet restore
|
|
- name: Publish
|
|
run: dotnet publish -c Release -o ./publish
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: media-publish
|
|
path: ./publish
|
|
deploy:
|
|
needs: build
|
|
runs-on: ubuntu-latest
|
|
environment: production
|
|
steps:
|
|
- name: Download artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: media-publish
|
|
path: publish
|
|
- name: Prepare SSH
|
|
run: |
|
|
install -m 700 -d ~/.ssh
|
|
echo "${{ secrets.MEDIA_SSH_KEY }}" > ~/.ssh/id_rsa
|
|
chmod 600 ~/.ssh/id_rsa
|
|
ssh-keyscan -p "${{ secrets.SSH_PORT || 22 }}" "${{ secrets.SSH_HOST }}" >> ~/.ssh/known_hosts
|
|
- name: Rsync to nginx server
|
|
run: |
|
|
rsync -az --delete -e "ssh -p ${{ secrets.SSH_PORT || 22 }} -i ~/.ssh/id_rsa" \
|
|
publish/ ${{ secrets.MEDIA_DEPLOY_USER }}@${{ secrets.SSH_HOST }}:/tmp/media-app-deploy/
|
|
- name: Copy to media server and restart
|
|
run: |
|
|
ssh -i ~/.ssh/id_rsa -p "${{ secrets.SSH_PORT || 22 }}" \
|
|
${{ secrets.MEDIA_DEPLOY_USER }}@${{ secrets.SSH_HOST }} \
|
|
"ssh [email protected] 'mkdir -p /tmp/media-app-temp' && \
|
|
scp -r /tmp/media-app-deploy/* [email protected]:/tmp/media-app-temp/ && \
|
|
ssh [email protected] 'sudo rsync -av --delete /tmp/media-app-temp/ /var/www/media-app/ && sudo systemctl restart media-app && rm -rf /tmp/media-app-temp' && \
|
|
rm -rf /tmp/media-app-deploy" |