domverse
3c8aab4cc5
Some checks failed
Deploy / deploy (push) Failing after 29s
- Compose: build → image (Gitea registry ci namespace) for backend + frontend - Workflow: build + push both + POST Portainer webhook (3-attempt retry) - Drop docker compose up on host - Add crowdsec@file to middlewares chain Repo secrets required: REGISTRY_TOKEN, PORTAINER_WEBHOOK_URL. Rollback branch: pre-portainer-migration.
61 lines
1.9 KiB
YAML
61 lines
1.9 KiB
YAML
# Flight Radar — Gitea Actions CI/CD
|
|
#
|
|
# Build backend + frontend images, push to Gitea registry, trigger Portainer
|
|
# redeploy via webhook. Stack managed by Portainer (type=git).
|
|
#
|
|
# Repo secrets required:
|
|
# REGISTRY_TOKEN ci user token, scope write:package
|
|
# PORTAINER_WEBHOOK_URL POST URL from Portainer stack auto-update setting
|
|
|
|
name: Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
BACKEND_IMAGE: git.domverse-berlin.eu/ci/ciaovolo/backend
|
|
FRONTEND_IMAGE: git.domverse-berlin.eu/ci/ciaovolo/frontend
|
|
CONTEXT: flight-comparator
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Login to Gitea registry
|
|
run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.domverse-berlin.eu -u ci --password-stdin
|
|
|
|
- name: Build and push backend
|
|
run: |
|
|
docker build -f "$CONTEXT/Dockerfile.backend" \
|
|
-t "$BACKEND_IMAGE:latest" -t "$BACKEND_IMAGE:${{ gitea.sha }}" \
|
|
"$CONTEXT"
|
|
docker push "$BACKEND_IMAGE:latest"
|
|
docker push "$BACKEND_IMAGE:${{ gitea.sha }}"
|
|
|
|
- name: Build and push frontend
|
|
run: |
|
|
docker build -f "$CONTEXT/Dockerfile.frontend" \
|
|
-t "$FRONTEND_IMAGE:latest" -t "$FRONTEND_IMAGE:${{ gitea.sha }}" \
|
|
"$CONTEXT"
|
|
docker push "$FRONTEND_IMAGE:latest"
|
|
docker push "$FRONTEND_IMAGE:${{ gitea.sha }}"
|
|
|
|
- name: Trigger Portainer redeploy (retry on transient pull-lease failure)
|
|
run: |
|
|
for i in 1 2 3; do
|
|
code=$(curl -sk -X POST -o /dev/null -w '%{http_code}' "${{ secrets.PORTAINER_WEBHOOK_URL }}")
|
|
echo "attempt $i -> $code"
|
|
[ "$code" = "204" ] && exit 0
|
|
sleep 5
|
|
done
|
|
exit 1
|
|
|
|
- name: Prune dangling images
|
|
run: docker image prune -f
|