df4fcfc659
On push to main, the homelab runner (container mode, docker socket mounted) builds the image, pushes it to the Forgejo registry tagged with the commit SHA and latest, then runs docker compose pull + up -d directly against the host Docker daemon — no SSH hop, since the runner already lives on the deploy host. Finishes with one curl -u admin:... against https://quartermaster.unbiasedgeek.com/healthz to catch TLS, Traefik routing, and basic-auth regressions in a single probe. Two repo-scoped secrets required: REGISTRY_TOKEN for docker login and QUARTERMASTER_SMOKE_PASSWORD for the public healthz probe. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
62 lines
1.7 KiB
YAML
62 lines
1.7 KiB
YAML
name: deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
build-push-deploy:
|
|
runs-on: homelab
|
|
env:
|
|
REGISTRY: forgejo.labbity.unbiasedgeek.com
|
|
IMAGE: forgejo.labbity.unbiasedgeek.com/archeious/quartermaster/quartermaster
|
|
COMPOSE_PROJECT_NAME: quartermaster
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to Forgejo registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: archeious
|
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
|
|
|
- name: Build and push image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
push: true
|
|
tags: |
|
|
${{ env.IMAGE }}:${{ github.sha }}
|
|
${{ env.IMAGE }}:latest
|
|
|
|
- name: Deploy
|
|
run: |
|
|
set -euo pipefail
|
|
printf 'QUARTERMASTER_TAG=%s\n' '${{ github.sha }}' > .env
|
|
docker compose pull
|
|
docker compose up -d
|
|
|
|
- name: Smoke test
|
|
env:
|
|
SMOKE_PASSWORD: ${{ secrets.QUARTERMASTER_SMOKE_PASSWORD }}
|
|
run: |
|
|
set -eu
|
|
for attempt in 1 2 3 4 5 6 7 8 9 10; do
|
|
code=$(curl -sS -o /dev/null -w '%{http_code}' \
|
|
-u "admin:$SMOKE_PASSWORD" \
|
|
https://quartermaster.unbiasedgeek.com/healthz || echo "000")
|
|
if [ "$code" = "200" ]; then
|
|
echo "smoke OK after $attempt attempt(s)"
|
|
exit 0
|
|
fi
|
|
echo "attempt $attempt: got $code, retrying"
|
|
sleep 3
|
|
done
|
|
echo "smoke FAILED — last code $code"
|
|
exit 1
|