4
4
push :
5
5
branches :
6
6
- ' *'
7
- release :
8
- types : [published]
7
+ # release:
8
+ # types: [published]
9
9
10
10
env :
11
11
DEPLOY_IMAGE_NAME : openplatform/api
@@ -102,7 +102,7 @@ jobs:
102
102
runs-on : ubuntu-latest
103
103
continue-on-error : false
104
104
needs : [tests]
105
- if : github.event.action == 'published'
105
+ # if: github.event.action == 'published'
106
106
107
107
steps :
108
108
@@ -168,6 +168,7 @@ jobs:
168
168
deploy-production :
169
169
name : Deploy Production
170
170
runs-on : ubuntu-latest
171
+ environment : PRODUCTION
171
172
continue-on-error : false
172
173
needs : [tests, build, package]
173
174
@@ -176,26 +177,26 @@ jobs:
176
177
- name : Setup SSH connection
177
178
run : |
178
179
eval $(ssh-agent -s)
179
- echo "${{ secrets.DEPLOY_KEY_PROD }}" > deploy_key
180
+ echo "${{ secrets.OPEN_API_DEPLOY_KEY_AWS }}" > deploy_key
180
181
chmod 600 ./deploy_key
181
182
mkdir -p ~/.ssh
182
183
chmod 700 ~/.ssh
183
- ssh-keyscan ${{ secrets.DEPLOY_HOST_PROD }} >> ~/.ssh/known_hosts
184
+ ssh-keyscan ${{ vars.AWS_HOST }} >> ~/.ssh/known_hosts
184
185
chmod 644 ~/.ssh/known_hosts
185
186
186
187
- name : Deploy image
187
188
run : |
188
- ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
189
+ ssh -i ./deploy_key ${{ vars.AWS_USER }}@${{ vars.AWS_HOST }} "
189
190
docker pull ${{ env.DEPLOY_IMAGE_NAME }}:${{ env.DEPLOY_IMAGE_TAG }}
190
191
"
191
- ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
192
+ ssh -i ./deploy_key ${{ vars.AWS_USER }}@${{ vars.AWS_HOST }} "
192
193
docker stop ${{ env.CONTAINER_NAME }} && \
193
194
IMG=\$(docker ps -a --filter='name=^/${{ env.CONTAINER_NAME }}$' --format='{{.Image}}') && \
194
195
docker rm -f ${{ env.CONTAINER_NAME }} && \
195
196
docker rmi \$IMG; \
196
197
exit 0
197
198
"
198
- ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
199
+ ssh -i ./deploy_key ${{ vars.AWS_USER }}@${{ vars.AWS_HOST }} "
199
200
docker run -d --name '${{ env.CONTAINER_NAME }}' --restart=always \
200
201
-p 8080:8080 \
201
202
-e "POSTGRES_HOST=${{ secrets.POSTGRES_HOST_PROD }}" \
@@ -229,16 +230,16 @@ jobs:
229
230
- name : Setup SSH connection
230
231
run : |
231
232
eval $(ssh-agent -s)
232
- echo "${{ secrets.DEPLOY_KEY_PROD }}" > deploy_key
233
+ echo "${{ secrets.OPEN_API_DEPLOY_KEY_AWS }}" > deploy_key
233
234
chmod 600 ./deploy_key
234
235
mkdir -p ~/.ssh
235
236
chmod 700 ~/.ssh
236
- ssh-keyscan ${{ secrets.DEPLOY_HOST_PROD }} >> ~/.ssh/known_hosts
237
+ ssh-keyscan ${{ vars.AWS_HOST }} >> ~/.ssh/known_hosts
237
238
chmod 644 ~/.ssh/known_hosts
238
239
239
240
- name : Update SSL certificate
240
241
run : |
241
- ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
242
+ ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ vars.AWS_HOST }} "
242
243
docker run --rm --name certbot \
243
244
-v /etc/letsencrypt:/etc/letsencrypt \
244
245
-v /var/www/certbot:/var/www/certbot \
@@ -248,5 +249,5 @@ jobs:
248
249
-d ${{ secrets.SERVER_NAME_PROD }} \
249
250
--renew-by-default -m team@openfuture.io --eff-email --agree-tos --manual-public-ip-logging-ok
250
251
"
251
- ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
252
+ ssh -i ./deploy_key ${{ vars.AWS_USER }}@${{ vars.AWS_HOST }} "
252
253
sudo service nginx reload"
0 commit comments