98 lines
3.9 KiB
YAML
98 lines
3.9 KiB
YAML
name: star-cloud-deploy-production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
deploy-production:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout Code
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Step 1 - Setup SSH and Sync Code
|
|
run: |
|
|
export DEBIAN_FRONTEND=noninteractive
|
|
echo "Waiting for apt lock..."
|
|
while fuser /var/lib/dpkg/lock-frontend >/dev/null 2>&1 ; do
|
|
echo "Apt is busy, waiting 5 seconds..."
|
|
sleep 5
|
|
done
|
|
|
|
if ! command -v rsync >/dev/null 2>&1 || ! command -v ssh >/dev/null 2>&1; then
|
|
apt-get update && apt-get install -y -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" rsync openssh-client
|
|
fi
|
|
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.PROD_SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa_prod
|
|
chmod 600 ~/.ssh/id_rsa_prod
|
|
echo "${{ secrets.PROD_KNOWN_HOSTS }}" >> ~/.ssh/known_hosts
|
|
|
|
echo "🚀 Syncing code via rsync..."
|
|
rsync -avz --delete \
|
|
--exclude='/.git' \
|
|
--exclude='/node_modules' \
|
|
--exclude='/vendor' \
|
|
--exclude='/storage' \
|
|
--exclude='/.env' \
|
|
--exclude='/public/build' \
|
|
-e "ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no" \
|
|
./ twsystem1003@34.84.169.132:~/star-cloud/
|
|
|
|
- name: Step 2 - Container Up & Health Check
|
|
run: |
|
|
ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no twsystem1003@34.84.169.132 << 'EOF'
|
|
cd ~/star-cloud
|
|
test -f .env || cp .env.example .env
|
|
chown -R twsystem1003:twsystem1003 ~/star-cloud
|
|
|
|
if git diff --name-only HEAD~1 HEAD 2>/dev/null | grep -qE '(Dockerfile|compose\.yaml|docker-compose\.yaml)'; then
|
|
echo "🔄 偵測到 Docker 檔案變更，執行完整重建..."
|
|
WWWGROUP=1001 WWWUSER=1001 docker-compose up -d --build
|
|
else
|
|
if ! docker ps --format '{{.Names}}' | grep -q 'star-cloud-laravel'; then
|
|
echo "容器未運行，正在啟動..."
|
|
WWWGROUP=1001 WWWUSER=1001 docker-compose up -d
|
|
fi
|
|
fi
|
|
docker ps --filter "name=star-cloud"
|
|
EOF
|
|
|
|
- name: Step 3 - Composer & NPM & Initialization
|
|
run: |
|
|
ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no twsystem1003@34.84.169.132 << 'EOF'
|
|
docker exec star-cloud-laravel sh -c "
|
|
chown -R 1001:1001 /var/www/html &&
|
|
mkdir -p /.npm && chown -R 1001:1001 /.npm &&
|
|
rm -rf /var/www/html/node_modules
|
|
"
|
|
|
|
docker exec -u 1001:1001 -w /var/www/html star-cloud-laravel sh -c "
|
|
composer install --no-dev --optimize-autoloader --no-interaction &&
|
|
npm install &&
|
|
npm run build &&
|
|
php artisan migrate --force &&
|
|
php artisan storage:link &&
|
|
php artisan optimize:clear &&
|
|
php artisan optimize &&
|
|
php artisan view:cache &&
|
|
php artisan queue:restart &&
|
|
php artisan db:seed --class=RoleSeeder --force &&
|
|
php artisan db:seed --class=AdminUserSeeder --force
|
|
"
|
|
docker exec star-cloud-laravel chmod -R 775 /var/www/html/storage /var/www/html/bootstrap/cache
|
|
EOF
|
|
|
|
- name: Step 4 - Restart Long-running Workers
|
|
run: |
|
|
ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no twsystem1003@34.84.169.132 "docker restart star-cloud-mqtt-worker"
|
|
echo "✅ MQTT Worker 已重啟"
|
|
|
|
- name: Step 5 - Cleanup and Key Removal
|
|
run: |
|
|
ssh -i ~/.ssh/id_rsa_prod -o StrictHostKeyChecking=no twsystem1003@34.84.169.132 "docker image prune -f"
|
|
rm ~/.ssh/id_rsa_prod
|
|
echo "✅ Cleanup complete"
|