170 lines
6.5 KiB
YAML
170 lines
6.5 KiB
YAML
name: Deploy Environment (reusable)
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
environment:
|
|
description: "Nome ambiente (test, prod, development, ...)"
|
|
required: true
|
|
type: string
|
|
host-var:
|
|
description: "Nome della variabile org che contiene l'host target (es. TEST_HOST, PROD_HOST)"
|
|
required: true
|
|
type: string
|
|
compose-opts:
|
|
description: "Opzioni aggiuntive per docker compose up (es. --force-recreate)"
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
pre-deploy-cmd:
|
|
description: "Comando da eseguire sul server prima del deploy (es. backup)"
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
post-deploy-cmd:
|
|
description: "Comando da eseguire sul server dopo il deploy (es. reload apache)"
|
|
required: false
|
|
type: string
|
|
default: ""
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
env:
|
|
ENV_NAME: ${{ inputs.environment }}
|
|
DEPLOY_USER: ${{ vars.DEPLOY_USER }}
|
|
DEPLOY_BASE_PATH: ${{ vars.DEPLOY_BASE_PATH }}
|
|
TARGET_HOST: ${{ vars[inputs.host-var] }}
|
|
steps:
|
|
- uses: actions/checkout@v6
|
|
|
|
- name: Verifica configurazione
|
|
run: |
|
|
missing=0
|
|
for v in DEPLOY_USER DEPLOY_BASE_PATH; do
|
|
eval "val=\${$v}"
|
|
if [ -z "$val" ]; then echo "MANCANTE: $v"; missing=1; else echo "OK: $v"; fi
|
|
done
|
|
if [ -z "${{ vars[inputs.host-var] }}" ]; then
|
|
echo "MANCANTE: variabile org '${{ inputs.host-var }}'"
|
|
missing=1
|
|
else
|
|
echo "OK: ${{ inputs.host-var }} = ${{ vars[inputs.host-var] }}"
|
|
fi
|
|
[ "$missing" -eq 0 ] || { echo "Imposta le Variables mancanti a livello org."; exit 1; }
|
|
|
|
- name: Verifica file ambiente
|
|
run: |
|
|
COMPOSE="docker-compose-${ENV_NAME}.yml"
|
|
ENV_FILE=".env_${ENV_NAME}"
|
|
|
|
if [ ! -f "$COMPOSE" ]; then
|
|
echo "ERRORE: $COMPOSE non trovato nel repo"
|
|
exit 1
|
|
fi
|
|
echo "Compose: $COMPOSE"
|
|
|
|
if [ -f "$ENV_FILE" ]; then
|
|
echo "Env file: $ENV_FILE"
|
|
else
|
|
echo "WARNING: $ENV_FILE non trovato, il deploy procede senza env file"
|
|
fi
|
|
|
|
# Cerca anche eventuali file apache
|
|
APACHE="apache-${ENV_NAME}.conf"
|
|
if [ -f "$APACHE" ]; then
|
|
echo "Apache config: $APACHE"
|
|
fi
|
|
|
|
- name: Setup SSH
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan -H "${{ vars[inputs.host-var] }}" >> ~/.ssh/known_hosts 2>/dev/null
|
|
|
|
- name: Pre-deploy
|
|
run: |
|
|
HOST="${{ vars[inputs.host-var] }}"
|
|
REMOTE_PATH="${DEPLOY_BASE_PATH}/${{ github.repository_owner }}/${{ github.event.repository.name }}"
|
|
APACHE="apache-${ENV_NAME}.conf"
|
|
SITE_NAME="${{ github.event.repository.name }}.site-ssl"
|
|
|
|
# Comandi standard (sempre eseguiti)
|
|
ssh ${DEPLOY_USER}@${HOST} "a2dissite ${SITE_NAME} -q || true"
|
|
ssh ${DEPLOY_USER}@${HOST} "service apache2 reload"
|
|
if [ -f "$APACHE" ]; then
|
|
ssh ${DEPLOY_USER}@${HOST} "cp -v /etc/apache2/sites-available/${SITE_NAME}.conf /etc/apache2/sites-available/${SITE_NAME}.conf_\$(date +%s)" || true
|
|
ssh ${DEPLOY_USER}@${HOST} "cp -v ${REMOTE_PATH}/${APACHE} /etc/apache2/sites-available/${SITE_NAME}.conf"
|
|
fi
|
|
|
|
# Comando custom (solo se fornito)
|
|
if [ -n "${{ inputs.pre-deploy-cmd }}" ]; then
|
|
ssh ${DEPLOY_USER}@${HOST} "${{ inputs.pre-deploy-cmd }}"
|
|
fi
|
|
|
|
- name: Docker login sul server
|
|
run: |
|
|
HOST="${{ vars[inputs.host-var] }}"
|
|
REGISTRY="${{ vars.DOCKER_REGISTRY }}"
|
|
AUTH=$(echo -n "${{ secrets.MAVEN_USERNAME }}:${{ secrets.MAVEN_PASSWORD }}" | base64 -w0)
|
|
|
|
# Scrive config.json direttamente, senza passare per docker login / credential helper
|
|
ssh ${DEPLOY_USER}@${HOST} "mkdir -p /tmp/.docker-ci && echo '{\"auths\":{\"${REGISTRY}\":{\"auth\":\"${AUTH}\"}}}' > /tmp/.docker-ci/config.json"
|
|
|
|
- name: Deploy
|
|
run: |
|
|
HOST="${{ vars[inputs.host-var] }}"
|
|
REMOTE_PATH="${DEPLOY_BASE_PATH}/${{ github.repository_owner }}/${{ github.event.repository.name }}"
|
|
COMPOSE="docker-compose-${ENV_NAME}.yml"
|
|
ENV_FILE=".env_${ENV_NAME}"
|
|
APACHE="apache-${ENV_NAME}.conf"
|
|
|
|
# Crea directory remota
|
|
ssh ${DEPLOY_USER}@${HOST} "mkdir -p ${REMOTE_PATH}"
|
|
|
|
# Copia file
|
|
FILES_TO_COPY="${COMPOSE}"
|
|
[ -f "$ENV_FILE" ] && FILES_TO_COPY="${FILES_TO_COPY} ${ENV_FILE}"
|
|
[ -f "$APACHE" ] && FILES_TO_COPY="${FILES_TO_COPY} ${APACHE}"
|
|
|
|
scp ${FILES_TO_COPY} ${DEPLOY_USER}@${HOST}:${REMOTE_PATH}/
|
|
|
|
# Pull e up con DOCKER_CONFIG per evitare GPG
|
|
COMPOSE_CMD="cd ${REMOTE_PATH} && DOCKER_CONFIG=/tmp/.docker-ci docker compose -f ${COMPOSE}"
|
|
[ -f "$ENV_FILE" ] && COMPOSE_CMD="${COMPOSE_CMD} --env-file ${ENV_FILE}"
|
|
COMPOSE_CMD="${COMPOSE_CMD} pull && ${COMPOSE_CMD} up -d ${{ inputs.compose-opts }}"
|
|
|
|
ssh ${DEPLOY_USER}@${HOST} "${COMPOSE_CMD}"
|
|
|
|
- name: Post-deploy
|
|
run: |
|
|
HOST="${{ vars[inputs.host-var] }}"
|
|
SITE_NAME="${{ github.event.repository.name }}.site-ssl"
|
|
|
|
# Comandi standard (sempre eseguiti)
|
|
ssh ${DEPLOY_USER}@${HOST} "a2ensite ${SITE_NAME} -q"
|
|
ssh ${DEPLOY_USER}@${HOST} "service apache2 reload"
|
|
ssh ${DEPLOY_USER}@${HOST} "DOCKER_CONFIG=/tmp/.docker-ci docker image prune -a -f"
|
|
|
|
# Comando custom (solo se fornito)
|
|
if [ -n "${{ inputs.post-deploy-cmd }}" ]; then
|
|
ssh ${DEPLOY_USER}@${HOST} "${{ inputs.post-deploy-cmd }}"
|
|
fi
|
|
|
|
- name: Verifica container
|
|
run: |
|
|
HOST="${{ vars[inputs.host-var] }}"
|
|
REMOTE_PATH="${DEPLOY_BASE_PATH}/${{ github.repository_owner }}/${{ github.event.repository.name }}"
|
|
COMPOSE="docker-compose-${ENV_NAME}.yml"
|
|
ENV_FILE=".env_${ENV_NAME}"
|
|
|
|
COMPOSE_CMD="cd ${REMOTE_PATH} && DOCKER_CONFIG=/tmp/.docker-ci docker compose -f ${COMPOSE}"
|
|
[ -f "$ENV_FILE" ] && COMPOSE_CMD="${COMPOSE_CMD} --env-file ${ENV_FILE}"
|
|
|
|
echo "── Container status ──"
|
|
ssh ${DEPLOY_USER}@${HOST} "${COMPOSE_CMD} ps"
|
|
|
|
# Cleanup config temporaneo
|
|
ssh ${DEPLOY_USER}@${HOST} "rm -rf /tmp/.docker-ci"
|