24d7602f5a
1. 改用 appleboy/ssh-action 取代 ssh 字串指令，對齊 deploy-remote-template 的架構。 2. Step 1 改回用 rsync 同步程式碼，SSH 金鑰由 runner 自行注入，移除 shimataro/ssh-key-action 依賴。 3. 加入智慧重建判斷（Step 2）：僅在 Dockerfile/compose.yaml 有變更時才執行 --build，加速一般部署。 4. 完整對齊 Step 3 的 chown / composer / npm / artisan 初始化邏輯，確保與 demo 部署行為一致。
115 lines
4.0 KiB
YAML
115 lines
4.0 KiB
YAML
name: star-cloud-deploy-production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
deploy-production:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Step 1 - Sync Code to Server
|
|
run: |
|
|
apt-get update && apt-get install -y rsync openssh-client
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.PROD_SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa_prod
|
|
chmod 600 ~/.ssh/id_rsa_prod
|
|
echo "${{ secrets.PROD_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts
|
|
|
|
rsync -avz --delete \
|
|
--exclude='/.git' \
|
|
--exclude='/node_modules' \
|
|
--exclude='/vendor' \
|
|
--exclude='/storage' \
|
|
--exclude='/.env' \
|
|
--exclude='/public/build' \
|
|
-e "ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no" \
|
|
./ twsystem1003@34.84.169.132:~/star-cloud/
|
|
|
|
rm ~/.ssh/id_rsa_prod
|
|
|
|
- name: Step 2 - Container Up & Health Check
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: 34.84.169.132
|
|
port: 22
|
|
username: twsystem1003
|
|
key: ${{ secrets.PROD_SSH_PRIVATE_KEY }}
|
|
script: |
|
|
cd ~/star-cloud
|
|
|
|
# 確保 .env 存在
|
|
test -f .env || cp .env.example .env
|
|
|
|
# 修正可能被 root 佔用的目錄權限
|
|
chown -R twsystem1003:twsystem1003 ~/star-cloud
|
|
|
|
if git diff --name-only HEAD~1 HEAD 2>/dev/null | grep -qE '(Dockerfile|compose\.yaml|docker-compose\.yaml)'; then
|
|
echo "🔄 偵測到 Docker 相關檔案變更，執行完整重建..."
|
|
WWWGROUP=1001 WWWUSER=1001 docker-compose up -d --build
|
|
else
|
|
echo "⚡ 無 Docker 檔案變更，確認容器狀態..."
|
|
if ! docker ps --format '{{.Names}}' | grep -q 'star-cloud-laravel'; then
|
|
echo "容器未運行，正在啟動..."
|
|
WWWGROUP=1001 WWWUSER=1001 docker-compose up -d
|
|
else
|
|
echo "容器已運行，直接進行程式碼部署..."
|
|
fi
|
|
fi
|
|
|
|
echo "容器狀態：" && docker ps --filter "name=star-cloud"
|
|
|
|
- name: Step 3 - Composer & NPM & Initialization
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: 34.84.169.132
|
|
port: 22
|
|
username: twsystem1003
|
|
key: ${{ secrets.PROD_SSH_PRIVATE_KEY }}
|
|
script: |
|
|
# 清除 node_modules 確保乾淨安裝
|
|
docker exec star-cloud-laravel sh -c "
|
|
chown -R 1001:1001 /var/www/html &&
|
|
mkdir -p /.npm && chown -R 1001:1001 /.npm &&
|
|
rm -rf /var/www/html/node_modules
|
|
"
|
|
|
|
docker exec -u 1001:1001 -w /var/www/html star-cloud-laravel sh -c "
|
|
composer install --no-dev --optimize-autoloader --no-interaction &&
|
|
npm install &&
|
|
npm run build &&
|
|
php artisan migrate --force &&
|
|
php artisan storage:link &&
|
|
php artisan optimize:clear &&
|
|
php artisan optimize &&
|
|
php artisan view:cache &&
|
|
php artisan queue:restart &&
|
|
php artisan db:seed --class=RoleSeeder --force &&
|
|
php artisan db:seed --class=AdminUserSeeder --force
|
|
"
|
|
docker exec star-cloud-laravel chmod -R 775 /var/www/html/storage /var/www/html/bootstrap/cache
|
|
|
|
- name: Step 4 - Restart Long-running Workers
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: 34.84.169.132
|
|
port: 22
|
|
username: twsystem1003
|
|
key: ${{ secrets.PROD_SSH_PRIVATE_KEY }}
|
|
script: |
|
|
docker restart star-cloud-mqtt-worker
|
|
echo "✅ MQTT Worker 已重啟"
|
|
|
|
- name: Step 5 - Cleanup
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: 34.84.169.132
|
|
port: 22
|
|
username: twsystem1003
|
|
key: ${{ secrets.PROD_SSH_PRIVATE_KEY }}
|
|
script: docker image prune -f
|