Release #21
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Release | |
permissions: | |
packages: write | |
contents: write | |
on: | |
# Triggered on new GitHub Release | |
release: | |
types: [published] | |
# Triggered on every successful Build action | |
workflow_run: | |
workflows: ["Build"] | |
branches: [main,master] | |
types: | |
- completed | |
# Manual trigger for rollback to specific release or redeploy latest | |
workflow_dispatch: | |
inputs: | |
version: | |
default: latest | |
description: Tag you want to release. | |
required: true | |
jobs: | |
push_to_registry: | |
runs-on: ubuntu-22.04 | |
if: ${{ github.event.workflow_run.conclusion != 'failure' }} | |
steps: | |
# Checkout latest or specific tag | |
- name: checkout | |
if: ${{ github.event.inputs.version == '' || github.event.inputs.version == 'latest' }} | |
uses: actions/checkout@v2 | |
- name: checkout tag | |
if: ${{ github.event.inputs.version != '' && github.event.inputs.version != 'latest' }} | |
uses: actions/checkout@v2 | |
with: | |
ref: refs/tags/${{ github.event.inputs.version }} | |
# Assign environment variables used in subsequent steps | |
- name: repository name fix | |
run: echo "image_repository_name=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV | |
# TAG_NAME defaults to 'latest' if not a release or manual deployment | |
- name: Assign version | |
run: | | |
echo "TAG_NAME=latest" >> $GITHUB_ENV | |
if [ "${{ github.event.release.tag_name }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | |
fi; | |
if [ "${{ github.event.inputs.version }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.inputs.version }}" >> $GITHUB_ENV | |
fi; | |
# Authenticate, build and push to GitHub Container Registry (ghcr.io) | |
- name: Login to GitHub Container Registry | |
uses: docker/login-action@v1 | |
with: | |
registry: ghcr.io | |
username: ${{ github.repository_owner }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
# Build and push new docker image, skip for manual redeploy other than 'latest' | |
- name: Build and push Docker images | |
uses: docker/[email protected] | |
if: ${{ github.event.inputs.version == '' || github.event.inputs.version == 'latest' }} | |
with: | |
file: Dockerfile | |
context: . | |
push: true | |
tags: ghcr.io/${{ env.image_repository_name }}:${{ env.TAG_NAME }} | |
deploy_via_ssh: | |
needs: push_to_registry | |
runs-on: ubuntu-22.04 | |
if: ${{ github.event.workflow_run.conclusion != 'failure' }} | |
steps: | |
# Checkout latest or specific tag | |
- name: checkout | |
if: ${{ github.event.inputs.version == '' || github.event.inputs.version == 'latest' }} | |
uses: actions/checkout@v2 | |
- name: checkout tag | |
if: ${{ github.event.inputs.version != '' && github.event.inputs.version != 'latest' }} | |
uses: actions/checkout@v2 | |
with: | |
ref: refs/tags/${{ github.event.inputs.version }} | |
# Assign environment variables used in subsequent steps | |
- name: repository name fix and env | |
run: | | |
echo "image_repository_name=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV | |
echo "TAG_NAME=latest" >> $GITHUB_ENV | |
if [ "${{ github.event.release.tag_name }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | |
fi; | |
if [ "${{ github.event.inputs.version }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.inputs.version }}" >> $GITHUB_ENV | |
fi; | |
- name: docker-compose file prep | |
uses: danielr1996/[email protected] | |
env: | |
RELEASE_VERSION: ${{ env.TAG_NAME }} | |
IMAGE_REPO: ${{ env.image_repository_name }} | |
APP_NAME: ${{ github.event.repository.name }} | |
HOST_DOMAIN: ${{ secrets.DEPLOY_API }} | |
LETSENCRYPT_EMAIL: ${{ secrets.LETSENCRYPT_EMAIL }} | |
with: | |
input: .deploy/docker-compose-template.yml | |
output: .deploy/${{ github.event.repository.name }}-docker-compose.yml | |
- name: copy compose file via scp | |
uses: appleboy/[email protected] | |
with: | |
host: ${{ secrets.DEPLOY_API }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
port: 22 | |
key: ${{ secrets.DEPLOY_KEY }} | |
source: ".deploy/${{ github.event.repository.name }}-docker-compose.yml" | |
target: "~/" | |
- name: remote docker-compose up via ssh | |
uses: appleboy/[email protected] | |
env: | |
APPTOKEN: ${{ secrets.GITHUB_TOKEN }} | |
USERNAME: ${{ secrets.DEPLOY_USERNAME }} | |
with: | |
host: ${{ secrets.DEPLOY_API }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
key: ${{ secrets.DEPLOY_KEY }} | |
port: ${{ secrets.DEPLOY_PORT }} | |
envs: APPTOKEN,USERNAME | |
script: | | |
echo $APPTOKEN | docker login ghcr.io -u $USERNAME --password-stdin | |
docker-compose -f ~/.deploy/${{ github.event.repository.name }}-docker-compose.yml pull | |
docker-compose -f ~/.deploy/${{ github.event.repository.name }}-docker-compose.yml up -d |