feat: ci for all pushes, deploy with ssh key, local compose with build

.gitea/workflows/ci.yml

@@ -1,27 +1,25 @@
-name: ci
+name: CI
 
 on:
   push:
-    branches:
-      - dev
-  pull_request:
-    branches:
+    branches-ignore:
       - master
 
-
-
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
-      - name: Node setup
-        uses: actions/setup-node@v6
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
         with:
           node-version: "25"
 
       - name: Install deps
         run: npm install
+
+      - name: Lint
+        run: npm run lint
+
       - name: Build
         run: npm run build

.gitea/workflows/deploy.yml

@@ -13,24 +13,30 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+
       - name: Install Ansible
         run: apt update && apt install -y ansible
 
       - name: Login to registry
         run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login $REGISTRY -u "${{ secrets.REGISTRY_USER }}" --password-stdin
 
-      - name: Build and push image
+      - name: Build and push
         run: |
           IMAGE=$REGISTRY/hellreign/frontend
-          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:${{ gitea.sha }} .
+          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:latest .
           docker push $IMAGE:dev
-          docker push $IMAGE:${{ gitea.sha }}
+          docker push $IMAGE:latest
 
-      - name: Deploy via Ansible
+      - name: Deploy
         run: |
           echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > .vault_pass
           ansible-playbook -i infra/ansible/inventory/hosts.yml infra/ansible/playbook.yml \
             --vault-password-file .vault_pass \
             -e registry=$REGISTRY \
-            -e tag=${{ gitea.sha }}
+            -e tag=latest
           rm .vault_pass