alboped/chat-one-service
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 2 Wiki Activity

refactor(ci): 统一接入公共 workflow_call 模板
Some checks failed
CI / ci (push) Has been cancelled
Details

Browse Source 
将 CI/Deploy 从本地脚本与中间复用层切换为公共 reusable-prepare-workspace 工作流，并规范 deploy 命令中的密钥注入方式，降低重复维护与调用兼容风险。

Made-with: Cursor
This commit is contained in:
alboped
2026-04-28 02:31:26 +08:00
parent 3076b7ec54
commit c2bc484b21
5 changed files with 234 additions and 256 deletions
Download Patch File Download Diff File Expand all files Collapse all files

108
.gitea/workflows/deploy.yml
View File

@@ -8,73 +8,57 @@ on:
jobs:
deploy:
if: ${{ github.event_name == 'workflow_dispatch' || startsWith(github.ref, 'refs/tags/v') }}
runs-on: ubuntu-latest
env:
NODE_MAJOR: "22"
YARN_VERSION: "stable"
DEPLOY_HOST: ${{ vars.DEPLOY_HOST }}
DEPLOY_PORT: ${{ vars.DEPLOY_PORT }}
DEPLOY_USER: ${{ vars.DEPLOY_USER }}
DEPLOY_PATH: ${{ vars.DEPLOY_PATH }}
IMAGE_REPO: ${{ vars.IMAGE_REPO }}
REGISTRY: ${{ vars.REGISTRY }}
uses: platform/workflow/.gitea/workflows/reusable-prepare-workspace.yml@1.1
secrets: inherit
with:
repo_url: "${{ github.server_url }}/${{ github.repository }}.git"
git_sha: "${{ github.sha }}"
node_major: "22"
yarn_version: "stable"
run_commands: |
set -euo pipefail
steps:
- name: Prepare workspace (checkout + node/yarn)
run: |
set -euo pipefail
chmod +x .gitea/scripts/prepare-workspace.sh
./.gitea/scripts/prepare-workspace.sh \
"${{ github.server_url }}/${{ github.repository }}.git" \
"${{ github.sha }}"
DEPLOY_HOST="${{ vars.DEPLOY_HOST }}"
DEPLOY_PORT="${{ vars.DEPLOY_PORT }}"
DEPLOY_USER="${{ vars.DEPLOY_USER }}"
DEPLOY_PATH="${{ vars.DEPLOY_PATH }}"
IMAGE_REPO="${{ vars.IMAGE_REPO }}"
REGISTRY="${{ vars.REGISTRY }}"
- name: Setup SSH
run: |
set -euo pipefail
mkdir -p ~/.ssh
echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa
ssh-keyscan -p "${DEPLOY_PORT:-22}" "${DEPLOY_HOST}" >> ~/.ssh/known_hosts
mkdir -p ~/.ssh
echo "${SSH_PRIVATE_KEY}" > ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa
ssh-keyscan -p "${DEPLOY_PORT:-22}" "${DEPLOY_HOST}" >> ~/.ssh/known_hosts
- name: Prepare image tag
run: |
set -euo pipefail
if [[ "${GITHUB_REF:-}" == refs/tags/* ]]; then
IMAGE_TAG="${GITHUB_REF_NAME}"
else
IMAGE_TAG="${GITHUB_SHA:0:12}"
fi
echo "IMAGE_TAG=${IMAGE_TAG}" >> "$GITHUB_ENV"
if [[ "${GITHUB_REF:-}" == refs/tags/* ]]; then
IMAGE_TAG="${GITHUB_REF_NAME}"
else
IMAGE_TAG="${GITHUB_SHA:0:12}"
fi
- name: Build and push image
run: |
set -euo pipefail
if [ -z "${REGISTRY}" ] || [ -z "${IMAGE_REPO}" ]; then
echo "REGISTRY and IMAGE_REPO vars are required"
exit 1
fi
if [ -z "${REGISTRY}" ] || [ -z "${IMAGE_REPO}" ]; then
echo "REGISTRY and IMAGE_REPO vars are required"
exit 1
fi
echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "${REGISTRY}" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
docker build -f deploy/docker/Dockerfile -t "${IMAGE_REPO}:${IMAGE_TAG}" .
docker push "${IMAGE_REPO}:${IMAGE_TAG}"
echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY}" -u "${REGISTRY_USERNAME}" --password-stdin
docker build -f deploy/docker/Dockerfile -t "${IMAGE_REPO}:${IMAGE_TAG}" .
docker push "${IMAGE_REPO}:${IMAGE_TAG}"
- name: Deploy
run: |
set -euo pipefail
ssh -p "${DEPLOY_PORT:-22}" "${DEPLOY_USER}@${DEPLOY_HOST}" <<EOF
set -euo pipefail
cd "${DEPLOY_PATH}"
ssh -p "${DEPLOY_PORT:-22}" "${DEPLOY_USER}@${DEPLOY_HOST}" <<EOF
set -euo pipefail
cd "${DEPLOY_PATH}"
mkdir -p deploy/docker
cat > deploy/docker/.env <<EOT
${{ vars.DEPLOY_DOCKER_ENV }}
IMAGE_REPO=${IMAGE_REPO}
IMAGE_TAG=${IMAGE_TAG}
EOT
mkdir -p deploy/docker
cat > deploy/docker/.env <<EOT
${{ vars.DEPLOY_DOCKER_ENV }}
IMAGE_REPO=${IMAGE_REPO}
IMAGE_TAG=${IMAGE_TAG}
EOT
echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "${REGISTRY}" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env pull app
docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env up -d app
docker compose -f deploy/docker/docker-compose.yml ps
curl -fsS "http://127.0.0.1:\${HOST_BIND_PORT:-3000}/api/docs" >/dev/null
EOF
echo "${REGISTRY_PASSWORD}" | docker login "${REGISTRY}" -u "${REGISTRY_USERNAME}" --password-stdin
docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env pull app
docker compose -f deploy/docker/docker-compose.yml --env-file deploy/docker/.env up -d app
docker compose -f deploy/docker/docker-compose.yml ps
curl -fsS "http://127.0.0.1:\${HOST_BIND_PORT:-3000}/api/docs" >/dev/null
EOF