nix/.forgejo/workflows/deploy-rs.yml
2024-04-10 08:15:25 +09:00

112 lines
3.4 KiB
YAML

name: deploy-rs
run-name: ${{ github.actor }} - deploy-rs
on:
schedule:
- cron: '0 2 * * *'
# “At 02:00 daily."
jobs:
deploy-rs:
runs-on: ubuntu
container:
image: ubuntu:23.10
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
steps:
- name: "Runner: Info"
run: |
set -x
pwd
ls -lah
id
uname -a
hostname
cat /etc/os-release
whoami
id
cat /etc/resolv.conf
- name: "Setup: Runner"
run: |
apt update -y
apt install git nodejs nix-bin sudo -y
git config --global user.email "${{github.actor}}"
git config --global user.name "Albert J. Copeland"
- name: "Setup: SSH"
run: |
rm -rf /root/.ssh
mkdir /root/.ssh
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
chmod 700 /root/.ssh
chmod 600 /root/.ssh/id_ed25519
chmod 644 /root/.ssh/id_ed25519.pub
echo "Public Key: "
cat /root/.ssh/id_ed25519.pub
- name: "Setup: Headscale"
run: |
echo "tailscaled --cleanup"
sudo tailscaled --cleanup
echo ""
echo "tailscaled --state=mem 2> ~/tailscaled.log &"
sudo tailscaled --state=mem: 2> ~/tailscaled.log &
echo ""
echo "tailscale up"
sudo tailscale up \
--login-server=https://headscale.sysctl.io \
--accept-routes \
--accept-dns \
--authkey ${{ secrets.TAILSCALE_KEY }} \
--hostname forgejo-runner \
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
sudo tailscale status
sudo tailscale netcheck
- name: "nixos-version (Pre)"
run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
"
nixos-version
"
- name: "SSH and Deploy"
run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
"
cd /etc/nixos/git
git pull
deploy
"
- name: "nixos-version (Post)"
run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
"
nixos-version
"
- if: success()
uses: https://git.sysctl.io/actions/gotify-action@master
with:
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed'
notification_message: 'Deployment completed successfully.'
name: "Send Notification - Success"
- if: success()
name: "Push changes to git"
run: |
ssh -q -A -o StrictHostKeyChecking=no albert@framework-server \
"
cd /etc/nixos/git
git commit -am \"[ACTIONS] deploy-rs updates (`date +%Y-%m-%d`)\"
git push
"
- if: failure()
uses: https://git.sysctl.io/actions/gotify-action@master
with:
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
notification_message: 'Your deployment has failed. Check Forgejo.'
name: "Send Notification - Failure"