92 lines
3.6 KiB
YAML
92 lines
3.6 KiB
YAML
name: build-deploy-junohub-ec2
|
|
|
|
env:
|
|
IMAGE_NAME: junohub-app
|
|
IMAGE_TAG: ${{ github.sha }}
|
|
CONTAINER_NAME: junohub-app
|
|
REMOTE_DIR: /home/JUNO
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths-ignore:
|
|
- "*.md"
|
|
- ".gitignore"
|
|
- "docs/**"
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-22.04
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Prepare deployment env file
|
|
run: |
|
|
echo "IMAGE_NAME=${{ env.IMAGE_NAME }}" > .env
|
|
echo "IMAGE_TAG=${{ env.IMAGE_TAG }}" >> .env
|
|
echo "CONTAINER_NAME=${{ env.CONTAINER_NAME }}" >> .env
|
|
echo "NODE_ENV=production" >> .env
|
|
cat <<'EOF' >> .env
|
|
${{ secrets.EC2_ENV }}
|
|
EOF
|
|
|
|
- name: Build Docker image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: Dockerfile
|
|
push: false
|
|
load: true
|
|
tags: |
|
|
${{ env.IMAGE_NAME }}:latest
|
|
${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
|
|
cache-from: type=gha
|
|
cache-to: type=gha,mode=max
|
|
|
|
- name: Save Docker image tar
|
|
run: |
|
|
mkdir -p docker
|
|
docker save -o docker/junohub-app_${{ env.IMAGE_TAG }}.tar ${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
|
|
|
|
- name: Setup SSH key
|
|
run: |
|
|
echo "${{ secrets.EC2_SSH_KEY }}" | tr -d '\r' > ssh_key.pem
|
|
chmod 400 ssh_key.pem
|
|
|
|
- name: Copy deployment files to EC2
|
|
run: |
|
|
ssh -i ssh_key.pem -o StrictHostKeyChecking=no ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} "mkdir -p '${{ env.REMOTE_DIR }}/prisma'"
|
|
scp -i ssh_key.pem -o StrictHostKeyChecking=no .env ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/.env
|
|
scp -i ssh_key.pem -o StrictHostKeyChecking=no docker-compose.ec2.yml ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/docker-compose.ec2.yml
|
|
scp -i ssh_key.pem -o StrictHostKeyChecking=no prisma/init-pgvector.sql ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/prisma/init-pgvector.sql
|
|
scp -i ssh_key.pem -o StrictHostKeyChecking=no docker/junohub-app_${{ env.IMAGE_TAG }}.tar ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }}:${{ env.REMOTE_DIR }}/junohub-app_${{ env.IMAGE_TAG }}.tar
|
|
|
|
- name: Deploy on EC2 with docker compose
|
|
run: |
|
|
ssh -i ssh_key.pem -o StrictHostKeyChecking=no ${{ secrets.EC2_USER }}@${{ secrets.EC2_HOST }} << 'ENDSSH'
|
|
set -e
|
|
cd ${{ env.REMOTE_DIR }}
|
|
docker load -i junohub-app_${{ env.IMAGE_TAG }}.tar
|
|
rm -f junohub-app_${{ env.IMAGE_TAG }}.tar
|
|
docker compose -f docker-compose.ec2.yml --env-file .env up -d --remove-orphans db
|
|
docker compose -f docker-compose.ec2.yml --env-file .env exec -T db sh -lc "psql -U \"\${POSTGRES_USER:-postgres}\" -d \"\${POSTGRES_DB:-dropshipping}\" -c \"CREATE EXTENSION IF NOT EXISTS vector;\""
|
|
# Stop and replace app container only (no volume removal)
|
|
docker compose -f docker-compose.ec2.yml --env-file .env stop app || true
|
|
docker compose -f docker-compose.ec2.yml --env-file .env rm -f app || true
|
|
docker compose -f docker-compose.ec2.yml --env-file .env up -d --no-deps --remove-orphans app
|
|
docker compose -f docker-compose.ec2.yml --env-file .env ps
|
|
ENDSSH
|
|
|
|
- name: Cleanup local artifacts
|
|
if: always()
|
|
run: |
|
|
rm -f ssh_key.pem
|
|
rm -f .env
|
|
rm -f docker/*.tar || true |