Merge pull request #102 from filips123/improvements-and-fixes #27
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deployment | |
| on: | |
| push: | |
| tags: | |
| - v* | |
| jobs: | |
| deploy: | |
| name: Deployment | |
| runs-on: ubuntu-latest | |
| environment: | |
| name: Production | |
| url: https://urnik.gimvic.org/ | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Enable Corepack | |
| run: corepack enable | |
| - name: Configure Poetry cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cache/pip | |
| ~/.cache/pypoetry | |
| ~/.local/share/pypoetry | |
| ~/.local/bin/poetry | |
| key: ${{ runner.os }}-poetry-deploy-${{ hashFiles('**/poetry.lock') }} | |
| restore-keys: ${{ runner.os }}-poetry- | |
| - name: Configure Yarn cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cache/yarn | |
| ~/.yarn/berry/cache | |
| ./website/node_modules/.cache | |
| ./website/node_modules/.vite | |
| key: ${{ runner.os }}-yarn-deploy-${{ hashFiles('**/yarn.lock') }} | |
| restore-keys: ${{ runner.os }}-yarn- | |
| - name: Install Python | |
| uses: actions/setup-python@v5 | |
| with: | |
| python-version: "3.12" | |
| - name: Install Poetry | |
| run: | | |
| curl -sSL https://install.python-poetry.org | python - | |
| ~/.local/bin/poetry config virtualenvs.create false | |
| echo "~/.local/bin" >> $GITHUB_PATH | |
| - name: Install Node.js | |
| uses: actions/setup-node@v4 | |
| with: | |
| node-version: "20" | |
| - name: Prepare the SSH configuration | |
| run: | | |
| mkdir ~/.ssh | |
| echo "${{ secrets.SERVER_SSH_CONFIG }}" > ~/.ssh/config | |
| echo "${{ secrets.SERVER_SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts | |
| echo "${{ secrets.SERVER_SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa | |
| sudo chmod 600 ~/.ssh/id_rsa | |
| ssh urnik "whoami" | |
| - name: Download the project configuration | |
| uses: actions/checkout@v4 | |
| with: | |
| repository: ${{ secrets.CONFIG_REPOSITORY_NAME }} | |
| ssh-key: ${{ secrets.CONFIG_REPOSITORY_PRIVATE_KEY }} | |
| path: configuration | |
| - name: Determine the project version | |
| run: | | |
| VERSION=${GITHUB_REF/refs\/tags\/v} | |
| echo "VERSION=$VERSION" >> $GITHUB_ENV | |
| - name: Build the backend | |
| run: | | |
| cd API | |
| cp -r ../configuration/backend/. . | |
| poetry version "$VERSION" | |
| mkdir dist | |
| cp pyproject.toml poetry.lock README.md dist/ | |
| cp -r gimvicurnik/ dist/ | |
| - name: Build the frontend | |
| run: | | |
| cd website | |
| cp -r ../configuration/frontend/. . | |
| yarn version "$VERSION" | |
| yarn build | |
| env: | |
| SENTRY_UPLOAD_SOURCEMAPS: true | |
| SENTRY_ORG: ${{ secrets.SENTRY_ORG }} | |
| SENTRY_PROJECT: ${{ secrets.SENTRY_FRONTEND_PROJECT }} | |
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |
| - name: Deploy the backend | |
| run: | | |
| cd API | |
| export GIMVICURNIK_ROOT=/var/www/urnik.gimvic.org | |
| ssh urnik "rm -rf $GIMVICURNIK_ROOT/app/*" | |
| scp -r dist/* urnik:$GIMVICURNIK_ROOT/app/ | |
| export PREFIX="export VIRTUAL_ENV=$GIMVICURNIK_ROOT/venv PATH=$GIMVICURNIK_ROOT/venv/bin:\$PATH" | |
| export SUFFIX="-C $GIMVICURNIK_ROOT/app --only main -E sentry -E mysql-c --sync" | |
| ssh urnik "$PREFIX; sh -c '/opt/poetry/bin/poetry install $SUFFIX'" | |
| - name: Deploy the frontend | |
| run: | | |
| cd website | |
| cp -r ../configuration/public/. dist/ | |
| scp -r dist/* urnik:/var/www/urnik.gimvic.org/html/ | |
| - name: Reload the server | |
| run: ssh urnik "sudo systemctl reload apache2.service" | |
| - name: Create a Sentry release | |
| uses: getsentry/action-release@v1 | |
| env: | |
| SENTRY_ORG: ${{ secrets.SENTRY_ORG }} | |
| SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} | |
| with: | |
| projects: ${{ secrets.SENTRY_BACKEND_PROJECT }} ${{ secrets.SENTRY_FRONTEND_PROJECT }} | |
| version: ${{ env.VERSION }} | |
| environment: production |