name: dev - build & deploy naar test # Elke push naar dev bouwt een image en zet die op de test-VM. on: push: branches: [dev] concurrency: group: deploy-test cancel-in-progress: true jobs: build-and-deploy: runs-on: ubuntu-latest # pas aan naar het label van jouw Forgejo-runner env: # 10.0.20.22:3000 - host van je Forgejo (= container registry host) REGISTRY: ${{ vars.REGISTRY }} IMAGE_NAME: ${{ github.repository }} # bes-r/teach steps: - uses: actions/checkout@v4 - name: Image-tags bepalen id: meta run: | IMAGE="${REGISTRY}/${IMAGE_NAME}" echo "image=${IMAGE}" >> "$GITHUB_OUTPUT" echo "sha_tag=${IMAGE}:dev-${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT" echo "dev_tag=${IMAGE}:dev" >> "$GITHUB_OUTPUT" # Platte docker build/push i.p.v. buildx: betrouwbaarder tegen een # HTTP-registry. De runner-host moet 10.0.20.22:3000 als # insecure-registry hebben (zie README). - name: Login, build & push run: | echo "${{ secrets.REGISTRY_TOKEN }}" | docker login "$REGISTRY" -u "${{ secrets.REGISTRY_USER }}" --password-stdin docker build \ --build-arg APP_VERSION="dev-${GITHUB_SHA::7}" \ -t "${{ steps.meta.outputs.sha_tag }}" \ -t "${{ steps.meta.outputs.dev_tag }}" . docker push "${{ steps.meta.outputs.sha_tag }}" docker push "${{ steps.meta.outputs.dev_tag }}" - name: Deploy naar test-VM uses: appleboy/ssh-action@v1 with: host: ${{ secrets.TEST_HOST }} username: ${{ secrets.TEST_USER }} key: ${{ secrets.TEST_SSH_KEY }} script: | set -e cd ${{ secrets.TEST_DEPLOY_PATH }} echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ vars.REGISTRY }} -u "${{ secrets.REGISTRY_USER }}" --password-stdin # Zet de te draaien image-tag in de env van de VM sed -i "s|^IMAGE=.*|IMAGE=${{ steps.meta.outputs.dev_tag }}|" .env docker compose -f compose.deploy.yaml pull docker compose -f compose.deploy.yaml up -d docker image prune -f