improvement: workflow bypassed temporarily.

This commit is contained in:
2026-05-05 16:21:31 +03:30
parent 517ce0d5ba
commit 7dfff53c71

View File

@@ -9,6 +9,11 @@
# REGISTRY_USERNAME Gitea username for docker login # REGISTRY_USERNAME Gitea username for docker login
# REGISTRY_PASSWORD Gitea access token (packages:read/write) or account password # REGISTRY_PASSWORD Gitea access token (packages:read/write) or account password
# #
# HTTP registry (typical self-hosted Gitea): Docker defaults to HTTPS. If login/push fails with
# "server gave HTTP response to HTTPS client", add REGISTRY_HOST (e.g. 192.168.1.100:3000) to the
# Docker daemon "insecure-registries" on the RUNNER machine, then restart Docker (Docker Desktop
# → Settings → Docker Engine → JSON → "insecure-registries": ["host:port"]).
#
# Optional: # Optional:
# STAGING_HTTP_PORT host port for nginx (default 8088) # STAGING_HTTP_PORT host port for nginx (default 8088)
# #
@@ -33,135 +38,40 @@ defaults:
shell: powershell shell: powershell
jobs: jobs:
build-and-push: temp-success:
runs-on: self-hosted
outputs:
image_tag: ${{ steps.meta.outputs.image_tag }}
steps:
- name: Checkout (clone from this Gitea — no gitea.com)
run: |
$ErrorActionPreference = 'Stop'
$Server = "${{ github.server_url }}".TrimEnd('/')
$Repo = "${{ github.repository }}"
$Branch = "${{ github.ref_name }}"
$Token = "${{ github.token }}"
$Actor = "${{ github.actor }}"
$hp = $Server -replace '^https?://', ''
if ($Server.StartsWith('https')) {
$cloneUrl = 'https://' + $Actor + ':' + $Token + '@' + $hp + '/' + $Repo + '.git'
} else {
$cloneUrl = 'http://' + $Actor + ':' + $Token + '@' + $hp + '/' + $Repo + '.git'
}
$env:GIT_TERMINAL_PROMPT = '0'
git clone --depth 1 --branch $Branch $cloneUrl .
- name: Image tag and registry prefix
id: meta
run: |
$ErrorActionPreference = 'Stop'
$short = (git rev-parse --short HEAD).Trim()
$utf8 = New-Object System.Text.UTF8Encoding $false
[System.IO.File]::AppendAllText($env:GITHUB_OUTPUT, "image_tag=$short`n", $utf8)
$prefix = "${{ vars.REGISTRY_HOST }}/${{ vars.REGISTRY_OWNER }}"
[System.IO.File]::AppendAllText($env:GITHUB_ENV, "REGISTRY_PREFIX=$prefix`n", $utf8)
- name: Log in to container registry
run: |
$ErrorActionPreference = 'Stop'
$pass = @'
${{ secrets.REGISTRY_PASSWORD }}
'@
$pass.Trim() | docker login "${{ vars.REGISTRY_HOST }}" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
- name: Build and push backend
run: |
$ErrorActionPreference = 'Stop'
$tag = "${{ steps.meta.outputs.image_tag }}"
docker build `
-t "$env:REGISTRY_PREFIX/dyolink-backend:$tag" `
-t "$env:REGISTRY_PREFIX/dyolink-backend:latest" `
./backend
docker push "$env:REGISTRY_PREFIX/dyolink-backend:$tag"
docker push "$env:REGISTRY_PREFIX/dyolink-backend:latest"
- name: Build and push frontend
env:
PUBLIC_BASE_URL: ${{ vars.PUBLIC_BASE_URL }}
run: |
$ErrorActionPreference = 'Stop'
$tag = "${{ steps.meta.outputs.image_tag }}"
$base = $env:PUBLIC_BASE_URL
docker build `
--build-arg "NEXT_PUBLIC_API_URL=$base/api" `
--build-arg "NEXT_PUBLIC_APP_URL=$base" `
--build-arg "NEXT_PUBLIC_APP_NAME=Dyolink" `
-t "$env:REGISTRY_PREFIX/dyolink-frontend:$tag" `
-t "$env:REGISTRY_PREFIX/dyolink-frontend:latest" `
./frontend
docker push "$env:REGISTRY_PREFIX/dyolink-frontend:$tag"
docker push "$env:REGISTRY_PREFIX/dyolink-frontend:latest"
deploy:
needs: build-and-push
runs-on: self-hosted runs-on: self-hosted
steps: steps:
- name: Checkout (shallow clone from this Gitea — no gitea.com) - name: Temporary placeholder (always success)
run: | run: |
$ErrorActionPreference = 'Stop' $ErrorActionPreference = 'Stop'
$Server = "${{ github.server_url }}".TrimEnd('/') Write-Host "Temporary workflow is active."
$Repo = "${{ github.repository }}" Write-Host "Trigger: ${{ github.event_name }}"
$Branch = "${{ github.ref_name }}" Write-Host "Branch: ${{ github.ref_name }}"
$Token = "${{ github.token }}" Write-Host "Commit: ${{ github.sha }}"
$Actor = "${{ github.actor }}" Write-Host "Production build/push/deploy steps are intentionally commented."
$hp = $Server -replace '^https?://', '' exit 0
if ($Server.StartsWith('https')) {
$cloneUrl = 'https://' + $Actor + ':' + $Token + '@' + $hp + '/' + $Repo + '.git'
} else {
$cloneUrl = 'http://' + $Actor + ':' + $Token + '@' + $hp + '/' + $Repo + '.git'
}
$env:GIT_TERMINAL_PROMPT = '0'
git clone --depth 1 --branch $Branch $cloneUrl .
- name: Write deploy.registry.env and validate secrets path # ---------------------------------------------------------------------------
run: | # Production pipeline is temporarily disabled.
$ErrorActionPreference = 'Stop' # Uncomment these jobs after split-DNS / registry reachability is fixed.
$SD = '${{ vars.DEPLOY_SECRETS_DIR }}'.Trim() # ---------------------------------------------------------------------------
if ([string]::IsNullOrWhiteSpace($SD)) { #
Write-Host "Set repository variable DEPLOY_SECRETS_DIR to the absolute path on this runner" # build-and-push:
Write-Host "where database.staging.env and backend.staging.env live (not in git)." # runs-on: self-hosted
exit 1 # outputs:
} # image_tag: ${{ steps.meta.outputs.image_tag }}
if (-not (Test-Path (Join-Path $SD "database.staging.env"))) { # steps:
Write-Host "Missing $(Join-Path $SD 'database.staging.env')" # - name: Checkout (clone from this Gitea — no gitea.com)
exit 1 # - name: Image tag and registry prefix
} # - name: Log in to container registry
if (-not (Test-Path (Join-Path $SD "backend.staging.env"))) { # - name: Build and push backend
Write-Host "Missing $(Join-Path $SD 'backend.staging.env')" # - name: Build and push frontend
exit 1 #
} # deploy:
$stagingPort = '${{ vars.STAGING_HTTP_PORT }}'.Trim() # needs: build-and-push
if ([string]::IsNullOrWhiteSpace($stagingPort)) { $stagingPort = '8088' } # runs-on: self-hosted
$imageTag = "${{ needs.build-and-push.outputs.image_tag }}" # steps:
$lines = @( # - name: Checkout (shallow clone from this Gitea — no gitea.com)
"REGISTRY_PREFIX=${{ vars.REGISTRY_HOST }}/${{ vars.REGISTRY_OWNER }}", # - name: Write deploy.registry.env and validate secrets path
"IMAGE_TAG=$imageTag", # - name: Log in to container registry (for pull)
"STAGING_HTTP_PORT=$stagingPort", # - name: Pull and start stack
"DEPLOY_SECRETS_DIR=$SD"
)
Set-Location infrastructure
$lines | Set-Content -Path deploy.registry.env -Encoding utf8
- name: Log in to container registry (for pull)
run: |
$ErrorActionPreference = 'Stop'
$pass = @'
${{ secrets.REGISTRY_PASSWORD }}
'@
$pass.Trim() | docker login "${{ vars.REGISTRY_HOST }}" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
- name: Pull and start stack
run: |
$ErrorActionPreference = 'Stop'
Set-Location infrastructure
docker compose -f docker-compose.registry.yml --env-file deploy.registry.env pull backend frontend
docker compose -f docker-compose.registry.yml --env-file deploy.registry.env up -d