03.Deploy Application to Server #16
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy | |
| on: | |
| push: | |
| branches: main | |
| workflow_dispatch: | |
| env: | |
| REGISTRY: ghcr.io | |
| IMAGE_NAME: tester | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout del repository | |
| uses: actions/checkout@v2 | |
| - name: Set ENV variables | |
| run: | | |
| echo "REPO_NAME=${GITHUB_REPOSITORY#$GITHUB_REPOSITORY_OWNER/}" >> $GITHUB_ENV | |
| echo $GITHUB_ENV | |
| - name: Create project directory and conf file | |
| uses: appleboy/ssh-action@v0.1.3 | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| script: | | |
| mkdir -p "/opt/${{ env.REPO_NAME }}" | |
| mkdir -p "/opt/${{ env.REPO_NAME }}/config" | |
| rm /opt/${{ env.REPO_NAME }}/confing/.env | |
| echo "DEBUG=False" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "SECRET_KEY=foo" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "DJANGO_ALLOWED_HOSTS=localhost 127.0.0.1 [::1] *" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "SQL_ENGINE=django.db.backends.postgresql" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "POSTGRES_DB=${{ secrets.POSTGRES_DB }}" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "POSTGRES_USER=${{ secrets.POSTGRES_USER }}" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "SQL_HOST=db" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "SQL_PORT=5432" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "DATABASE=postgres" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| echo "DOMAIN=${{ secrets.DOMAIN }}" >> "/opt/${{ env.REPO_NAME }}/config/.env" | |
| - name: SCP Docker Compose file and Nginx conf | |
| uses: appleboy/scp-action@master | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| source: "./docker-compose-prod.yml" | |
| target: "/opt/${{ env.REPO_NAME }}/" | |
| - name: SCP Nginx conf file | |
| uses: appleboy/scp-action@master | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| source: "./nginx/nginx.conf" | |
| target: "/opt/${{ env.REPO_NAME }}/" | |
| - name: Update Nginx configuration file | |
| uses: appleboy/ssh-action@v0.1.3 | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| script: | | |
| sed -i "s/server_name localhost/server_name ${{ secrets.DOMAIN }}/g" /opt/${{ env.REPO_NAME }}/nginx/nginx.conf | |
| - name: Upgrade server and install Docker | |
| uses: appleboy/ssh-action@v0.1.3 | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| script: | | |
| sudo apt update -y | |
| sudo apt upgrade -y | |
| # Add Docker's official GPG key: | |
| sudo apt-get update | |
| sudo apt-get install ca-certificates curl | |
| sudo install -m 0755 -d /etc/apt/keyrings | |
| sudo curl -fsSL https://download.docker.com/linux/ubuntu/gpg -o /etc/apt/keyrings/docker.asc | |
| sudo chmod a+r /etc/apt/keyrings/docker.asc | |
| # Add the repository to Apt sources: | |
| echo \ | |
| "deb [arch=$(dpkg --print-architecture) signed-by=/etc/apt/keyrings/docker.asc] https://download.docker.com/linux/ubuntu \ | |
| $(. /etc/os-release && echo "$VERSION_CODENAME") stable" | \ | |
| sudo tee /etc/apt/sources.list.d/docker.list > /dev/null | |
| sudo apt-get update -y | |
| sudo apt-get install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin -y | |
| - name: set lower case owner name | |
| run: | | |
| echo "OWNER_LC=${OWNER,,}" >>${GITHUB_ENV} | |
| env: | |
| OWNER: '${{ github.repository_owner }}' | |
| # - name: LOG IN to container registry | |
| # run: | | |
| # echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| # - name: Pull image from GitHub Container Registry | |
| # run: | | |
| # echo ${REGISTRY}/${OWNER_LC}/${{ env.IMAGE_NAME }}:latest | |
| # docker pull ${REGISTRY}/${OWNER_LC}/${{ env.IMAGE_NAME }}:latest | |
| # docker tag ${REGISTRY}/${OWNER_LC}/${{ env.IMAGE_NAME }}:latest ${{ env.IMAGE_NAME }} | |
| # docker images | |
| - name: Stop And Start containers | |
| uses: appleboy/ssh-action@v0.1.3 | |
| with: | |
| host: ${{ secrets.HOST }} | |
| username: ${{ secrets.USERNAME }} | |
| key: ${{ secrets.DO_SSH_PRIVATE_KEY }} | |
| script: | | |
| echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin | |
| echo ${REGISTRY}/${OWNER_LC}/${{ env.IMAGE_NAME }}:latest | |
| echo ${REGISTRY} | |
| echo ${OWNER_LC} | |
| docker pull ghcr.io/leobitto/${{ env.IMAGE_NAME }}:latest | |
| docker tag ghcr.io/leobitto/${{ env.IMAGE_NAME }}:latest ${{ env.IMAGE_NAME }} | |
| docker images | |
| docker tag ${REGISTRY}/${OWNER_LC}/${{ env.IMAGE_NAME }}:latest ${{ env.IMAGE_NAME }} | |
| docker-compose -f /opt/${{ env.REPO_NAME }}/docker-compose-prod.yml down | |
| docker-compose -f /opt/${{ env.REPO_NAME }}/docker-compose-prod.yml up -d --force-recreate | |
| # docker-compose -f /opt/${{ env.REPO_NAME }}/docker-compose-prod.yml exec -T web python manage.py migrate --noinput | |
| # docker-compose -f /opt/${{ env.REPO_NAME }}/docker-compose-prod.yml exec -T web python manage.py collectstatic --noinput --clear | |