Update ssh keys for forgejo nix runner
This commit is contained in:
parent
a2ada21c95
commit
60e2373822
GPG key ID:
3895DD267CA11BA9
2 changed files with 110 additions and 2 deletions
108
.forgejo/workflows/cron/auto-deploy-rs.yml
Normal file
108
.forgejo/workflows/cron/auto-deploy-rs.yml
Normal file
|
|
@ -0,0 +1,108 @@
|
||||||
|
# yamllint disable rule:line-length rule:truthy
|
||||||
|
---
|
||||||
|
name: Cron - deploy-rs
|
||||||
|
run-name: ${{ github.actor }} - deploy-rs
|
||||||
|
on:
|
||||||
|
schedule:
|
||||||
|
- cron: '0 2 * * 0'
|
||||||
|
# “At 02:00 Sunday."
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
deploy-rs:
|
||||||
|
runs-on: ubuntu
|
||||||
|
container:
|
||||||
|
image: ubuntu:24.04
|
||||||
|
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
|
||||||
|
steps:
|
||||||
|
- name: "Setup: Runner"
|
||||||
|
run: |
|
||||||
|
set -x
|
||||||
|
echo 'Why is nothing being output here'
|
||||||
|
apt update -y
|
||||||
|
apt install git nodejs nix-bin sudo curl -y
|
||||||
|
git config --global user.email ${{github.actor}}
|
||||||
|
git config --global user.name "Forgejo Runner"
|
||||||
|
echo "100.64.0.13 gotify.sysctl.io" >> /etc/hosts
|
||||||
|
|
||||||
|
- name: "Setup: Tailscale Repo"
|
||||||
|
run: |
|
||||||
|
set -x
|
||||||
|
mkdir -p --mode=0755 /usr/share/keyrings
|
||||||
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.noarmor.gpg | sudo tee /usr/share/keyrings/tailscale-archive-keyring.gpg >/dev/null
|
||||||
|
curl -fsSL https://pkgs.tailscale.com/stable/ubuntu/lunar.tailscale-keyring.list | sudo tee /etc/apt/sources.list.d/tailscale.list
|
||||||
|
apt update -y
|
||||||
|
apt install tailscale -y
|
||||||
|
|
||||||
|
- name: "Setup: SSH"
|
||||||
|
run: |
|
||||||
|
rm -rf /root/.ssh
|
||||||
|
mkdir /root/.ssh
|
||||||
|
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
||||||
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
||||||
|
chmod 700 /root/.ssh
|
||||||
|
|
||||||
|
- name: "Setup: Headscale Network"
|
||||||
|
run: |
|
||||||
|
set -x
|
||||||
|
sudo tailscaled --cleanup
|
||||||
|
sudo tailscaled --state=mem: 2> ~/tailscaled.log &
|
||||||
|
sudo tailscale up \
|
||||||
|
--login-server=https://headscale.sysctl.io \
|
||||||
|
--accept-routes \
|
||||||
|
--accept-dns \
|
||||||
|
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
||||||
|
--hostname forgejo-runner \
|
||||||
|
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
||||||
|
sudo tailscale status
|
||||||
|
sudo tailscale netcheck
|
||||||
|
|
||||||
|
- name: "nixos-version (Pre)"
|
||||||
|
run: |
|
||||||
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01 \
|
||||||
|
"
|
||||||
|
nixos-version
|
||||||
|
"
|
||||||
|
|
||||||
|
- name: "SSH and Deploy"
|
||||||
|
run: |
|
||||||
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01 \
|
||||||
|
"
|
||||||
|
set -x
|
||||||
|
eval (ssh-agent -c)
|
||||||
|
ssh-add
|
||||||
|
env | grep SSH
|
||||||
|
cd /etc/nixos/git
|
||||||
|
git pull
|
||||||
|
ssh -qA osaka-linode-01 'sudo systemctl restart podman-derp'
|
||||||
|
ssh -qA frankfurt-linode-01 'sudo systemctl restart podman-derp'
|
||||||
|
ssh -qA milan-linode-01 'sudo systemctl restart podman-derp'
|
||||||
|
ssh -qA warsaw-ovh-01 'sudo systemctl restart container@rdesktop'
|
||||||
|
sleep 30
|
||||||
|
deploy -sd
|
||||||
|
deploy -sd
|
||||||
|
"
|
||||||
|
|
||||||
|
- name: "nixos-version (Post)"
|
||||||
|
run: |
|
||||||
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01 \
|
||||||
|
"
|
||||||
|
nixos-version
|
||||||
|
"
|
||||||
|
tailscale down
|
||||||
|
|
||||||
|
- if: success()
|
||||||
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
||||||
|
with:
|
||||||
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
||||||
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
||||||
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed'
|
||||||
|
notification_message: 'Deployment completed successfully.'
|
||||||
|
name: "Send Notification - Success"
|
||||||
|
- if: failure()
|
||||||
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
||||||
|
with:
|
||||||
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
||||||
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
||||||
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
|
||||||
|
notification_message: 'Your deployment has failed. Check Forgejo.'
|
||||||
|
name: "Send Notification - Failure"
|
||||||
|
|
@ -5,8 +5,8 @@
|
||||||
#################
|
#################
|
||||||
# Forgejo Actions
|
# Forgejo Actions
|
||||||
#################
|
#################
|
||||||
# (Fri Dec 15 09:34:02 AM UTC 2023) forgejo-runner (nix)
|
# (Fri Dec 05 09:34:02 AM UTC 2024) forgejo-runner (nix)
|
||||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJJE7z4JlohTe2TfB5ovsDWMT+M+V9AyQ6dXNelX6oGU nix-forgejo-runner
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIG9Raje0kn0wmJm2dXNTMDzWQr09tAqbBR8tymODFw61 nix-forgejo-runner
|
||||||
|
|
||||||
# (Mon Jul 8 19:07:00 PM JST 2024) forgejo-runner (docker-compose)
|
# (Mon Jul 8 19:07:00 PM JST 2024) forgejo-runner (docker-compose)
|
||||||
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOxM5Hqqw1jKzSpMGm3UQCISoWBsFzRGa+JnvlW0Eh9X docker-compose-forgejo-runner
|
ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIOxM5Hqqw1jKzSpMGm3UQCISoWBsFzRGa+JnvlW0Eh9X docker-compose-forgejo-runner
|
||||||
|
|
|
||||||
Loading…
Reference in a new issue