Kyle Pope
76b19cd33a
Some checks failed
Build and Deploy UMBRA / build-and-deploy (push) Failing after 10s
The job container can't access the host filesystem directly. Spawn a docker:cli container that mounts the host's DEPLOY_PATH (where docker-compose.yaml and .env live) and runs compose commands. Requires DEPLOY_PATH variable in Gitea (e.g. /home/user/.../UMBRA). When moving to a new host, only the Gitea variable needs updating. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
85 lines
3.0 KiB
YAML
85 lines
3.0 KiB
YAML
name: Build and Deploy UMBRA
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: https://github.com/actions/checkout@v4
|
|
with:
|
|
token: ${{ secrets.REGISTRY_TOKEN }}
|
|
|
|
- name: Login to Gitea Container Registry
|
|
run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login ${{ vars.REGISTRY_HOST }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
|
|
|
|
- name: Build and push backend
|
|
run: |
|
|
docker build -t ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-backend:main-latest \
|
|
-t ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-backend:${{ github.sha }} \
|
|
./backend
|
|
docker push ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-backend:main-latest
|
|
docker push ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-backend:${{ github.sha }}
|
|
|
|
- name: Build and push frontend
|
|
run: |
|
|
docker build -t ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-frontend:main-latest \
|
|
-t ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-frontend:${{ github.sha }} \
|
|
./frontend
|
|
docker push ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-frontend:main-latest
|
|
docker push ${{ vars.REGISTRY_HOST }}/rohskiddo/umbra-frontend:${{ github.sha }}
|
|
|
|
- name: Deploy
|
|
run: |
|
|
# Spawn a short-lived container that mounts the host deploy path
|
|
# and runs compose commands against the host Docker daemon.
|
|
# DEPLOY_PATH is a Gitea variable — update it when moving hosts.
|
|
docker run --rm \
|
|
--network host \
|
|
--security-opt label:disable \
|
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
|
-v ${{ vars.DEPLOY_PATH }}:/deploy \
|
|
-w /deploy \
|
|
docker:cli sh -c "
|
|
docker compose pull backend frontend &&
|
|
docker compose up -d --remove-orphans
|
|
"
|
|
|
|
- name: Health check
|
|
run: |
|
|
echo "Waiting for services to start..."
|
|
sleep 15
|
|
curl -f http://localhost/health || exit 1
|
|
|
|
- name: Prune old images
|
|
if: success()
|
|
run: docker image prune -f
|
|
|
|
- name: Notify success
|
|
if: success()
|
|
run: |
|
|
curl -s \
|
|
-H "Title: UMBRA Deploy Success" \
|
|
-H "Tags: white_check_mark" \
|
|
--data-binary @- https://ntfy.ghost6.xyz/claude <<'NTFY_EOF'
|
|
Build ${{ github.sha }} deployed successfully to umbra.ghost6.xyz.
|
|
Triggered by push to main.
|
|
NTFY_EOF
|
|
|
|
- name: Notify failure
|
|
if: failure()
|
|
run: |
|
|
curl -s \
|
|
-H "Title: UMBRA Deploy FAILED" \
|
|
-H "Tags: fire" \
|
|
-H "Priority: high" \
|
|
--data-binary @- https://ntfy.ghost6.xyz/claude <<'NTFY_EOF'
|
|
Deploy failed for commit ${{ github.sha }}.
|
|
Check Gitea Actions logs at git.sentinelforest.xyz.
|
|
NTFY_EOF
|