template/.github/workflows/deploy.yml at a66107541bea807f0b86a4f256bbd08f9e9edc1f · rhidium/template · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
name: Deploy

on:
  workflow_dispatch:
  workflow_run:
    workflows: [Release]
    types:
      - completed

jobs:
  notify-start:
    runs-on: ubuntu-latest
    # Only continue if the workflow run was successful
    # Subsequent jobs will not run if this job fails,
    # because of the `needs` parameters in the other jobs.
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    steps:
      - name: Discord Webhook - Notify Start Deploy
        uses: tsickert/discord-webhook@v5.3.0
        continue-on-error: true
        with:
          username: "Mirasaki Development CI/CD"
          avatar-url: "https://mirasaki.dev/logo.png"
          webhook-url: ${{ secrets.DEPLOYMENT_WEBHOOK_URL }}
          embed-author-name: "Continuous Deployment by Mirasaki Development"
          embed-author-url: "https://mirasaki.dev"
          embed-author-icon-url: "https://mirasaki.dev/logo.png"
          embed-color: 14228765
          embed-title: "⬇️ Rhidium"
          embed-description: "⌛ Deploying **`@${{ github.repository }}`**...\n📤 Service is now temporarily unavailable."

  deploy:
    strategy: # Only run one deploy job at a time
      max-parallel: 1
    permissions:
      # The "id-token: write" permission is required or Machine ID will not be
      # able to authenticate with the cluster.
      id-token: write
      contents: read
    name: deploy
    needs: notify-start
    runs-on: ubuntu-latest
    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
      - name: Fetch Teleport binaries
        uses: teleport-actions/setup@v1
        with:
          version: 16.4.0
      - name: Fetch credentials using Machine ID
        id: auth
        uses: teleport-actions/auth@v2
        with:
          proxy: tp.mirasaki.dev:443
          token: deploy-bot
          certificate-ttl: 1h
          anonymous-telemetry: 1
      - name: Deploy to Production
        run: |
          tsh ssh mirasaki-development@eu1.mirasaki.dev << 'ENDSSH'
            cd ~/rhidium/template
            git pull origin main
            docker compose build --no-cache --pull --quiet
            docker compose down
            docker compose up -d
            exit
          ENDSSH

  notify-finish:
    needs: deploy
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Discord Webhook - Notify Finish Deploy
        uses: tsickert/discord-webhook@v5.3.0
        with:
          username: "Mirasaki Development CI/CD"
          avatar-url: "https://mirasaki.dev/logo.png"
          webhook-url: ${{ secrets.DEPLOYMENT_WEBHOOK_URL }}
          filename: "CHANGELOG.md"
          embed-author-name: "Continuous Deployment by Mirasaki Development"
          embed-author-url: "https://mirasaki.dev"
          embed-author-icon-url: "https://mirasaki.dev/logo.png"
          embed-color: 9559538
          embed-title: "⬆️ Rhidium"
          embed-description: "✅ Finished deploying **`@${{ github.repository }}`**\n📥 <@1174745346719625216> is back online"