feat: ci for all pushes, deploy with ssh key, local compose with build

2026-06-13 21:00:09 +03:00
parent fb6bf6e1bf
commit 2a108e1b5a
5 changed files with 28 additions and 25 deletions
@@ -13,24 +13,30 @@ jobs:
    steps:
      - uses: actions/checkout@v4

+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+
      - name: Install Ansible
        run: apt update && apt install -y ansible

      - name: Login to registry
        run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login $REGISTRY -u "${{ secrets.REGISTRY_USER }}" --password-stdin

-      - name: Build and push image
+      - name: Build and push
        run: |
          IMAGE=$REGISTRY/hellreign/frontend
-          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:${{ gitea.sha }} .
+          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:latest .
          docker push $IMAGE:dev
-          docker push $IMAGE:${{ gitea.sha }}
+          docker push $IMAGE:latest

-      - name: Deploy via Ansible
+      - name: Deploy
        run: |
          echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > .vault_pass
          ansible-playbook -i infra/ansible/inventory/hosts.yml infra/ansible/playbook.yml \
            --vault-password-file .vault_pass \
            -e registry=$REGISTRY \
-            -e tag=${{ gitea.sha }}
+            -e tag=latest
          rm .vault_pass