89 lines
3.3 KiB
YAML
89 lines
3.3 KiB
YAML
# yamllint disable rule:line-length rule:truthy
|
|
---
|
|
name: deploy-rs
|
|
run-name: ${{ github.actor }} - deploy-rs
|
|
on:
|
|
schedule:
|
|
- cron: '0 2 * * 0'
|
|
# “At 02:00 Sunday."
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
deploy-rs:
|
|
runs-on: headscale-runner
|
|
container:
|
|
image: git.sysctl.io/albert/actions-container-images/headscale-runner:latest
|
|
options: --mount type=bind,src=/dev/net/tun,dst=/dev/net/tun --privileged
|
|
steps:
|
|
- name: "Install SSH Keys"
|
|
run: |
|
|
echo "${{ secrets.SSH_PUBLIC_KEY }}" > /root/.ssh/id_ed25519.pub
|
|
echo "${{ secrets.SSH_PRIVATE_KEY }}" > /root/.ssh/id_ed25519
|
|
chmod 700 /root/.ssh
|
|
chmod 600 /root/.ssh/id_ed25519
|
|
chmod 644 /root/.ssh/id_ed25519.pub
|
|
cat /etc/hosts.template > /etc/hosts
|
|
|
|
- name: "Connect to Headscale"
|
|
run: |
|
|
set -x
|
|
sudo tailscaled --cleanup
|
|
sudo tailscaled --no-logs-no-support --state=mem: 2> ~/tailscaled.log &
|
|
sudo tailscale up \
|
|
--login-server=https://headscale.sysctl.io \
|
|
--accept-routes \
|
|
--accept-dns \
|
|
--authkey ${{ secrets.TAILSCALE_KEY }} \
|
|
--hostname forgejo-runner \
|
|
--advertise-tags "tag:forgejo,tag:container,tag:ephemeral"
|
|
|
|
- name: "nixos-version (Pre)"
|
|
run: |
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01.servers.hs.net \
|
|
"
|
|
nixos-version
|
|
"
|
|
|
|
- name: "SSH and Deploy"
|
|
run: |
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01.servers.hs.net \
|
|
"
|
|
set -x
|
|
eval (ssh-agent -c)
|
|
ssh-add
|
|
env | grep SSH
|
|
cd /etc/nixos/git
|
|
git pull
|
|
ssh -qA osaka-linode-01.servers.hs.net 'sudo systemctl restart podman-derp'
|
|
ssh -qA frankfurt-linode-01.servers.hs.net 'sudo systemctl restart podman-derp'
|
|
ssh -qA milan-linode-01.servers.hs.net 'sudo systemctl restart podman-derp'
|
|
ssh -qA warsaw-ovh-01.servers.hs.net 'sudo systemctl restart container@rdesktop'
|
|
sleep 30
|
|
deploy -sd
|
|
deploy -sd
|
|
"
|
|
|
|
- name: "nixos-version (Post)"
|
|
run: |
|
|
ssh -q -A -o StrictHostKeyChecking=no albert@warsaw-ovh-01.servers.hs.net \
|
|
"
|
|
nixos-version
|
|
"
|
|
tailscale down
|
|
|
|
- if: success()
|
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
|
with:
|
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] NixOS Deployed'
|
|
notification_message: 'Deployment completed successfully.'
|
|
name: "Send Notification - Success"
|
|
- if: failure()
|
|
uses: https://git.sysctl.io/actions/gotify-action@master
|
|
with:
|
|
gotify_api_base: '${{ secrets.GOTIFY_URL }}'
|
|
gotify_app_token: '${{ secrets.GOTIFY_TOKEN }}'
|
|
notification_title: '[ ${{ github.repository }}: ${{ github.workflow }} ] Deployment Failed'
|
|
notification_message: 'Your deployment has failed. Check Forgejo.'
|
|
name: "Send Notification - Failure"
|