Release #68
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Release | |
permissions: | |
packages: write | |
contents: write | |
on: | |
# Triggered on new GitHub Release | |
release: | |
types: [published] | |
# Triggered on every successful Build action | |
workflow_run: | |
workflows: ["Build"] | |
branches: [main,master] | |
types: | |
- completed | |
# Manual trigger for rollback to specific release or redeploy latest | |
workflow_dispatch: | |
inputs: | |
version: | |
default: latest | |
description: Tag you want to release. | |
required: true | |
jobs: | |
push_to_registry: | |
runs-on: ubuntu-latest | |
if: ${{ github.event.workflow_run.conclusion != 'failure' }} | |
steps: | |
# Checkout latest or specific tag | |
- name: checkout | |
if: ${{ github.event.inputs.version == '' || github.event.inputs.version == 'latest' }} | |
uses: actions/checkout@v3 | |
- name: checkout tag | |
if: ${{ github.event.inputs.version != '' && github.event.inputs.version != 'latest' }} | |
uses: actions/checkout@v3 | |
with: | |
ref: refs/tags/${{ github.event.inputs.version }} | |
# Assign environment variables used in subsequent steps | |
- name: Env variable assignment | |
run: echo "image_repository_name=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV | |
# TAG_NAME defaults to 'latest' if not a release or manual deployment | |
- name: Assign version | |
run: | | |
echo "TAG_NAME=latest" >> $GITHUB_ENV | |
if [ "${{ github.event.release.tag_name }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | |
fi; | |
if [ "${{ github.event.inputs.version }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.inputs.version }}" >> $GITHUB_ENV | |
fi; | |
- name: setup .net core | |
uses: actions/setup-dotnet@v3 | |
with: | |
dotnet-version: '8.*' | |
- name: Install x tool | |
run: dotnet tool install -g x | |
- name: Apply Production AppSettings | |
working-directory: ./CreatorKit | |
run: | | |
cat <<EOF >> appsettings.json.patch | |
${{ secrets.APPSETTINGS_PATCH }} | |
EOF | |
x patch appsettings.json.patch | |
- name: Login to GitHub Container Registry | |
uses: docker/login-action@v2 | |
with: | |
registry: ghcr.io | |
username: ${{ github.actor }} | |
password: ${{ secrets.GITHUB_TOKEN }} | |
# Build and push new docker image, skip for manual redeploy other than 'latest' | |
- name: Build and push Docker image | |
run: | | |
dotnet publish --os linux --arch x64 -c Release -p:ContainerRepository=${{ env.image_repository_name }} -p:ContainerRegistry=ghcr.io -p:ContainerImageTags=${{ env.TAG_NAME }} -p:ContainerPort=80 | |
deploy_via_ssh: | |
needs: push_to_registry | |
runs-on: ubuntu-latest | |
if: ${{ github.event.workflow_run.conclusion != 'failure' }} | |
steps: | |
# Checkout latest or specific tag | |
- name: checkout | |
if: ${{ github.event.inputs.version == '' || github.event.inputs.version == 'latest' }} | |
uses: actions/checkout@v3 | |
- name: checkout tag | |
if: ${{ github.event.inputs.version != '' && github.event.inputs.version != 'latest' }} | |
uses: actions/checkout@v3 | |
with: | |
ref: refs/tags/${{ github.event.inputs.version }} | |
- name: repository name fix and env | |
run: | | |
echo "image_repository_name=$(echo ${{ github.repository }} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV | |
echo "TAG_NAME=latest" >> $GITHUB_ENV | |
if [ "${{ github.event.release.tag_name }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.release.tag_name }}" >> $GITHUB_ENV | |
fi; | |
if [ "${{ github.event.inputs.version }}" != "" ]; then | |
echo "TAG_NAME=${{ github.event.inputs.version }}" >> $GITHUB_ENV | |
fi; | |
- name: Create .env file | |
run: | | |
echo "Generating .env file" | |
echo "# Autogenerated .env file" > .deploy/.env | |
echo "HOST_DOMAIN=${{ secrets.DEPLOY_HOST }}" >> .deploy/.env | |
echo "LETSENCRYPT_EMAIL=${{ secrets.LETSENCRYPT_EMAIL }}" >> .deploy/.env | |
echo "APP_NAME=${{ github.event.repository.name }}" >> .deploy/.env | |
echo "IMAGE_REPO=${{ env.image_repository_name }}" >> .deploy/.env | |
echo "RELEASE_VERSION=${{ env.TAG_NAME }}" >> .deploy/.env | |
echo "R2_ACCESS_KEY_ID=${{ secrets.R2_ACCESS_KEY_ID }}" >> .deploy/.env | |
echo "R2_SECRET_ACCESS_KEY=${{ secrets.R2_SECRET_ACCESS_KEY }}" >> .deploy/.env | |
# Copy only the docker-compose.yml to remote server home folder | |
- name: copy files to target server via scp | |
uses: appleboy/[email protected] | |
with: | |
host: ${{ secrets.DEPLOY_HOST }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
port: 22 | |
key: ${{ secrets.DEPLOY_KEY }} | |
strip_components: 2 | |
source: "./.deploy/docker-compose.yml,./.deploy/.env" | |
target: "~/.deploy/${{ github.event.repository.name }}/" | |
# Populate litestream.yml with variables from build process, including TAG_NAME. | |
- name: litestream.yml file prep | |
uses: danielr1996/[email protected] | |
env: | |
R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }} | |
R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }} | |
with: | |
input: .deploy/litestream-template.yml | |
output: .deploy/litestream.yml | |
- name: copy litestream.yml file via scp | |
uses: appleboy/[email protected] | |
with: | |
host: ${{ secrets.DEPLOY_HOST }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
port: 22 | |
strip_components: 1 | |
key: ${{ secrets.DEPLOY_KEY }} | |
source: ".deploy/litestream.yml" | |
target: ".deploy/${{ github.event.repository.name }}/config" | |
- name: Run remote db migrations | |
uses: appleboy/[email protected] | |
env: | |
APPTOKEN: ${{ secrets.GITHUB_TOKEN }} | |
USERNAME: ${{ secrets.DEPLOY_USERNAME }} | |
with: | |
host: ${{ secrets.DEPLOY_HOST }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
key: ${{ secrets.DEPLOY_KEY }} | |
port: 22 | |
envs: APPTOKEN,USERNAME | |
script: | | |
set -e | |
echo $APPTOKEN | docker login ghcr.io -u $USERNAME --password-stdin | |
cd ~/.deploy/${{ github.event.repository.name }} | |
docker compose pull | |
export APP_ID=$(docker compose run --entrypoint "id -u" --rm app) | |
docker compose run --entrypoint "chown $APP_ID:$APP_ID /app/App_Data" --user root --rm app | |
docker compose up app-migration --exit-code-from app-migration | |
# Deploy Docker image with your application using `docker compose up` remotely | |
- name: remote docker-compose up via ssh | |
uses: appleboy/[email protected] | |
env: | |
APPTOKEN: ${{ secrets.GITHUB_TOKEN }} | |
USERNAME: ${{ secrets.DEPLOY_USERNAME }} | |
with: | |
host: ${{ secrets.DEPLOY_HOST }} | |
username: ${{ secrets.DEPLOY_USERNAME }} | |
key: ${{ secrets.DEPLOY_KEY }} | |
port: 22 | |
envs: APPTOKEN,USERNAME | |
script: | | |
echo $APPTOKEN | docker login ghcr.io -u $USERNAME --password-stdin | |
cd ~/.deploy/${{ github.event.repository.name }} | |
docker compose pull | |
docker compose up app -d |