2023-12-25 03:32:41 +01:00
|
|
|
name: deploy-rs
|
2023-12-25 03:30:44 +01:00
|
|
|
run-name: ${{ github.actor }} - deploy-rs
|
|
|
|
on:
|
2023-12-25 09:08:34 +01:00
|
|
|
schedule:
|
2024-01-29 03:39:49 +01:00
|
|
|
- cron: '0 2 * * *'
|
2024-01-29 00:17:24 +01:00
|
|
|
# “At 02:00 daily."
|
2023-12-25 08:48:57 +01:00
|
|
|
|
2023-12-25 03:30:44 +01:00
|
|
|
jobs:
|
2023-12-25 03:32:41 +01:00
|
|
|
deploy-rs:
|
2024-04-05 01:26:10 +02:00
|
|
|
runs-on: ubuntu
|
2023-12-25 05:44:31 +01:00
|
|
|
container:
|
2024-04-05 01:26:10 +02:00
|
|
|
image: ubuntu:23.10
|
2023-12-25 05:44:31 +01:00
|
|
|
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
|
2023-12-25 03:30:44 +01:00
|
|
|
steps:
|
|
|
|
- name: "Runner: Info"
|
|
|
|
run: |
|
2024-01-10 02:38:04 +01:00
|
|
|
set -x
|
2023-12-25 03:30:44 +01:00
|
|
|
pwd
|
|
|
|
ls -lah
|
|
|
|
id
|
|
|
|
uname -a
|
|
|
|
hostname
|
|
|
|
cat /etc/os-release
|
|
|
|
whoami
|
|
|
|
id
|
|
|
|
cat /etc/resolv.conf
|
|
|
|
|
2023-12-25 05:44:31 +01:00
|
|
|
- name: "Setup: Runner"
|
|
|
|
run: |
|
2024-04-08 04:23:23 +02:00
|
|
|
apt update -y
|
2024-04-14 13:35:28 +02:00
|
|
|
apt install git nodejs nix-bin sudo -y
|
2024-04-08 04:23:23 +02:00
|
|
|
git config --global user.email "${{github.actor}}"
|
|
|
|
git config --global user.name "Albert J. Copeland"
|
2024-04-13 16:33:14 +02:00
|
|
|
|
|
|
|
- name: "Setup: Tailscale Repo"
|
|
|
|
run: |
|
|
|
|
sudo mkdir -p --mode=0755 /usr/share/keyrings
|
|
|
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
|
|
|
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list
|
|
|
|
|
2023-12-25 05:44:31 +01:00
|
|
|
- name: "Setup: SSH"
|
|
|
|
run: |
|
2024-04-09 01:15:15 +02:00
|
|
|
rm -rf /root/.ssh
|
2023-12-25 05:44:31 +01:00
|
|
|
mkdir /root/.ssh
|
|
|
|
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
|
|
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
|
|
|
chmod 700 /root/.ssh
|
|
|
|
chmod 600 /root/.ssh/id_ed25519
|
|
|
|
chmod 644 /root/.ssh/id_ed25519.pub
|
|
|
|
echo "Public Key: "
|
|
|
|
cat /root/.ssh/id_ed25519.pub
|
|
|
|
|
2024-04-13 16:33:14 +02:00
|
|
|
- name: "Setup: Headscale Network"
|
2023-12-25 03:30:44 +01:00
|
|
|
run: |
|
2023-12-25 05:44:31 +01:00
|
|
|
echo "tailscaled --cleanup"
|
|
|
|
sudo tailscaled --cleanup
|
|
|
|
echo ""
|
|
|
|
echo "tailscaled --state=mem 2> ~/tailscaled.log &"
|
|
|
|
sudo tailscaled --state=mem: 2> ~/tailscaled.log &
|
|
|
|
echo ""
|
|
|
|
echo "tailscale up"
|
|
|
|
sudo tailscale up \
|
|
|
|
--login-server=https://headscale.sysctl.io \
|
|
|
|
--accept-routes \
|
|
|
|
--accept-dns \
|
|
|
|
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
|
|
|
--hostname forgejo-runner \
|
|
|
|
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
|
|
|
sudo tailscale status
|
|
|
|
sudo tailscale netcheck
|
2023-12-25 03:30:44 +01:00
|
|
|
|
2024-01-16 00:43:14 +01:00
|
|
|
- name: "nixos-version (Pre)"
|
|
|
|
run: |
|
2024-01-22 07:47:41 +01:00
|
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
|
2024-01-16 00:43:14 +01:00
|
|
|
"
|
|
|
|
nixos-version
|
|
|
|
"
|
|
|
|
|
2023-12-25 08:59:27 +01:00
|
|
|
- name: "SSH and Deploy"
|
2023-12-25 05:44:31 +01:00
|
|
|
run: |
|
2024-01-22 07:47:41 +01:00
|
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
|
2023-12-25 08:15:03 +01:00
|
|
|
"
|
|
|
|
cd /etc/nixos/git
|
|
|
|
git pull
|
|
|
|
deploy
|
|
|
|
"
|
2023-12-25 03:30:44 +01:00
|
|
|
|
2024-01-16 00:43:14 +01:00
|
|
|
- name: "nixos-version (Post)"
|
|
|
|
run: |
|
2024-01-22 07:47:41 +01:00
|
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
|
2024-01-16 00:43:14 +01:00
|
|
|
"
|
|
|
|
nixos-version
|
|
|
|
"
|
|
|
|
|
2023-12-25 03:34:04 +01:00
|
|
|
- if: success()
|
2023-12-25 03:30:44 +01:00
|
|
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
|
|
|
with:
|
|
|
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
|
|
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
2023-12-25 03:34:04 +01:00
|
|
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed'
|
|
|
|
notification_message: 'Deployment completed successfully.'
|
2023-12-25 03:34:40 +01:00
|
|
|
name: "Send Notification - Success"
|
2024-02-15 02:02:18 +01:00
|
|
|
- if: success()
|
|
|
|
name: "Push changes to git"
|
|
|
|
run: |
|
|
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
|
|
|
|
"
|
2024-02-16 01:35:01 +01:00
|
|
|
cd /etc/nixos/git
|
2024-02-15 02:02:18 +01:00
|
|
|
git commit -am \"[ACTIONS] deploy-rs updates (`date +%Y-%m-%d`)\"
|
|
|
|
git push
|
|
|
|
"
|
2023-12-25 03:34:04 +01:00
|
|
|
- if: failure()
|
|
|
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
|
|
|
with:
|
|
|
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
|
|
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
|
|
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
|
|
|
|
notification_message: 'Your deployment has failed. Check Forgejo.'
|
2024-02-16 01:35:01 +01:00
|
|
|
name: "Send Notification - Failure"
|