Upravene formatovani #396
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: deploy-acceptance | |
| on: | |
| push: | |
| branches: [develop] | |
| concurrency: | |
| group: acceptance_env | |
| cancel-in-progress: true | |
| jobs: | |
| deploy: | |
| name: Deploy to acceptance | |
| environment: acceptance | |
| runs-on: ubuntu-22.04 | |
| env: | |
| APP_DIR: '${HOME}/acc/app' | |
| TMP_DIR: '${HOME}/acc/tmp' | |
| RELEASES_DIR: '${HOME}/acc/releases' | |
| SSH_HOST: ${{ secrets.SSH_HOST }} | |
| SSH_KEY: ${{ secrets.SSH_KEY }} | |
| SSH_PORT: ${{ secrets.SSH_PORT }} | |
| SSH_USER: ${{ secrets.SSH_USER }} | |
| SSH_USER_WEB: ${{ secrets.SSH_USER_WEB }} | |
| CFA_USER: ${{ secrets.CFA_USER }} | |
| CFA_PASS: ${{ secrets.CFA_PASS }} | |
| UZIS_TOKEN: ${{ secrets.UZIS_TOKEN }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Prepare config file | |
| uses: falnyr/[email protected] | |
| env: | |
| DB_HOST: ${{ secrets.DB_HOST }} | |
| DB_PORT: ${{ secrets.DB_PORT }} | |
| DB_USER: ${{ secrets.DB_USER }} | |
| DB_PASSWORD: ${{ secrets.DB_PASSWORD }} | |
| DB_NAME: ${{ secrets.DB_NAME }} | |
| TWITTER_CONSUMER_KEY: ${{ secrets.TWITTER_CONSUMER_KEY }} | |
| TWITTER_CONSUMER_SECRET: ${{ secrets.TWITTER_CONSUMER_SECRET }} | |
| TWITTER_ACCESS_TOKEN_KEY: ${{ secrets.TWITTER_ACCESS_TOKEN_KEY }} | |
| TWITTER_ACCESS_TOKEN_SECRET: ${{ secrets.TWITTER_ACCESS_TOKEN_SECRET }} | |
| CFA_USER: ${{ secrets.CFA_USER }} | |
| CFA_PASS: ${{ secrets.CFA_PASS }} | |
| UZIS_TOKEN: ${{ secrets.UZIS_TOKEN }} | |
| with: | |
| filename: config.ci.py | |
| - name: Build release package | |
| run: | | |
| mv config.ci.py config.py | |
| tar -cvf release.tar app data migrations scripts .flaskenv config.py ockovani.py requirements.txt | |
| - name: Setup SSH key | |
| run: | | |
| mkdir -p ~/.ssh/ | |
| ssh-keyscan -H ${SSH_HOST} >> ~/.ssh/known_hosts | |
| eval `ssh-agent -s` | |
| echo "${SSH_KEY}" | tr -d '\r' | ssh-add - | |
| echo "SSH_AUTH_SOCK=$SSH_AUTH_SOCK" >> $GITHUB_ENV | |
| - name: Upload release package | |
| run: scp -P ${SSH_PORT} release.tar ${SSH_USER_WEB}@${SSH_HOST}:${TMP_DIR} | |
| - name: Prepare relase directory | |
| run: | | |
| RELEASE_DIR=${RELEASES_DIR}/release_`date "+%Y%m%d_%H%M%S"` | |
| echo "RELEASE_DIR=$RELEASE_DIR" >> $GITHUB_ENV | |
| ssh ${SSH_USER_WEB}@${SSH_HOST} -p ${SSH_PORT} "mkdir ${RELEASE_DIR}" | |
| - name: Unpack release and clean tmp | |
| run: ssh ${SSH_USER_WEB}@${SSH_HOST} -p ${SSH_PORT} "tar -xvf ${TMP_DIR}/release.tar -C ${RELEASE_DIR} && rm ${TMP_DIR}/*" | |
| - name: Create venv and install requirements | |
| run: ssh ${SSH_USER_WEB}@${SSH_HOST} -p ${SSH_PORT} "cd ${RELEASE_DIR} && python3 -m venv venv && source venv/bin/activate && pip install -r requirements.txt --no-cache-dir" | |
| - name: Swap releases | |
| run: ssh ${SSH_USER_WEB}@${SSH_HOST} -p ${SSH_PORT} "rm -f ${APP_DIR} && ln -s ${RELEASE_DIR} ${APP_DIR} && find ${RELEASES_DIR} -maxdepth 1 -mindepth 1 -not -path ${RELEASE_DIR} -exec rm -rf {} \;" | |
| - name: Execute migrations | |
| run: ssh ${SSH_USER_WEB}@${SSH_HOST} -p ${SSH_PORT} "cd ${APP_DIR} && source venv/bin/activate && flask db upgrade" | |
| - name: Restart flask | |
| run: ssh ${SSH_USER}@${SSH_HOST} -p ${SSH_PORT} "sudo systemctl stop ockovani-acc && sudo systemctl start ockovani-acc" |