82 lines
2.3 KiB
YAML
82 lines
2.3 KiB
YAML
# Tests every push; a push to master that passes is deployed to homelab.
|
|
#
|
|
# Deploying: the job SSHes to homelab with DEPLOY_SSH_KEY. That key may only
|
|
# run ~/bin/deploy-usenet-indexer (a forced command in authorized_keys),
|
|
# which fetches the commit from this repo, builds the image, runs the
|
|
# migrations and recreates the app services (never postgres or redis).
|
|
name: Test and deploy
|
|
|
|
on:
|
|
push:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
services:
|
|
postgres:
|
|
image: postgres:17
|
|
env:
|
|
POSTGRES_USER: indexer
|
|
POSTGRES_PASSWORD: indexer
|
|
POSTGRES_DB: usenet_indexer
|
|
options: >-
|
|
--health-cmd "pg_isready -U indexer -d usenet_indexer"
|
|
--health-interval 5s
|
|
--health-retries 20
|
|
redis:
|
|
image: redis:8
|
|
env:
|
|
TZ: UTC
|
|
PORT: 3333
|
|
HOST: 0.0.0.0
|
|
NODE_ENV: test
|
|
LOG_LEVEL: warn
|
|
APP_KEY: ci-only-app-key-not-a-secret-000000
|
|
APP_URL: http://localhost:3333
|
|
SESSION_DRIVER: memory
|
|
DB_CONNECTION: pg
|
|
DB_HOST: postgres
|
|
DB_PORT: 5432
|
|
DB_USER: indexer
|
|
DB_PASSWORD: indexer
|
|
DB_DATABASE: usenet_indexer
|
|
REDIS_HOST: redis
|
|
REDIS_PORT: 6379
|
|
# Tests never connect to a news server.
|
|
NNTP_HOST: localhost
|
|
NNTP_PORT: 563
|
|
NNTP_USER: ci
|
|
NNTP_PASSWORD: ci
|
|
NNTP_SECURE: true
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
- uses: actions/setup-node@v4
|
|
with:
|
|
node-version-file: .nvmrc
|
|
cache: npm
|
|
- run: npm ci
|
|
- name: Type check
|
|
run: npx tsc --noEmit
|
|
- name: Migrate
|
|
run: node ace migration:run --force
|
|
- name: Test
|
|
run: node ace test
|
|
|
|
deploy:
|
|
needs: test
|
|
if: github.ref == 'refs/heads/master'
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Deploy to homelab
|
|
env:
|
|
DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
|
|
DEPLOY_KNOWN_HOSTS: ${{ secrets.DEPLOY_KNOWN_HOSTS }}
|
|
run: |
|
|
install -m 700 -d ~/.ssh
|
|
printf '%s\n' "$DEPLOY_SSH_KEY" > ~/.ssh/deploy_key
|
|
chmod 600 ~/.ssh/deploy_key
|
|
printf '%s\n' "$DEPLOY_KNOWN_HOSTS" > ~/.ssh/known_hosts
|
|
ssh -i ~/.ssh/deploy_key -o IdentitiesOnly=yes -o BatchMode=yes \
|
|
daan@10.206.0.175 "deploy ${{ github.sha }}"
|