feat: ci for all pushes, deploy with ssh key, local compose with build

.gitea/workflows/ci.yml

@@ -1,27 +1,25 @@
-name: ci
+name: CI
 
 on:
   push:
-    branches:
+    branches-ignore:
-      - dev
-  pull_request:
-    branches:
       - master
 
-
-
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
+      - uses: actions/checkout@v4
-        uses: actions/checkout@v6
+
-      - name: Node setup
+      - uses: actions/setup-node@v4
-        uses: actions/setup-node@v6
         with:
           node-version: "25"
 
       - name: Install deps
         run: npm install
+
+      - name: Lint
+        run: npm run lint
+
       - name: Build
         run: npm run build

.gitea/workflows/deploy.yml

@@ -13,24 +13,30 @@ jobs:
     steps:
       - uses: actions/checkout@v4
 
+      - name: Setup SSH
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+
       - name: Install Ansible
         run: apt update && apt install -y ansible
 
       - name: Login to registry
         run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login $REGISTRY -u "${{ secrets.REGISTRY_USER }}" --password-stdin
 
-      - name: Build and push image
+      - name: Build and push
         run: |
           IMAGE=$REGISTRY/hellreign/frontend
-          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:${{ gitea.sha }} .
+          docker build -f dockerfile -t $IMAGE:dev -t $IMAGE:latest .
           docker push $IMAGE:dev
-          docker push $IMAGE:${{ gitea.sha }}
+          docker push $IMAGE:latest
 
-      - name: Deploy via Ansible
+      - name: Deploy
         run: |
           echo "${{ secrets.ANSIBLE_VAULT_PASSWORD }}" > .vault_pass
           ansible-playbook -i infra/ansible/inventory/hosts.yml infra/ansible/playbook.yml \
             --vault-password-file .vault_pass \
             -e registry=$REGISTRY \
-            -e tag=${{ gitea.sha }}
+            -e tag=latest
           rm .vault_pass

docker-compose.yml

@@ -0,0 +1,7 @@
+services:
+  app:
+    build:
+      context: .
+      dockerfile: dockerfile
+    ports:
+      - "80:80"

infra/ansible/inventory/hosts.yml

@@ -4,7 +4,3 @@ all:
       ansible_host: <SERVER_IP>
       ansible_user: root
       ansible_port: 22
-  vars:
-    registry: gitea.d3m0k1d.ru
-    registry_user: <REGISTRY_USER>
-    registry_password: <REGISTRY_PASSWORD>

infra/ansible/playbook.yml

@@ -15,10 +15,6 @@
         src: "{{ playbook_dir }}/../docker-compose.yml"
         dest: "{{ deploy_path }}/docker-compose.yml"
 
-    - name: Login to registry
-      ansible.builtin.shell:
-        cmd: echo "{{ registry_password }}" | docker login "{{ registry }}" -u "{{ registry_user }}" --password-stdin
-
     - name: Pull images
       ansible.builtin.shell:
         cmd: docker compose pull
@@ -27,7 +23,7 @@
         REGISTRY: "{{ registry }}"
         TAG: "{{ tag }}"
 
-    - name: Restart services
+    - name: Start services
       ansible.builtin.shell:
         cmd: docker compose up -d --remove-orphans
         chdir: "{{ deploy_path }}"