Compare commits
5 Commits
83fbb16b6b
...
main
| Author | SHA1 | Date | |
|---|---|---|---|
| 6ad77f7ef6 | |||
| 3c46cb7c5b | |||
| 6c5c85ec4c | |||
| d7de80e7e0 | |||
| 9d88936b4a |
@@ -0,0 +1,112 @@
|
||||
name: Production Deployment
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
- refactored
|
||||
|
||||
jobs:
|
||||
build:
|
||||
name: Build and Push Docker Image
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout Code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
|
||||
- name: Log in to Gitea Container Registry
|
||||
uses: docker/login-action@v3
|
||||
with:
|
||||
registry: git.nciphered.com
|
||||
username: ${{ github.actor }}
|
||||
password: ${{ secrets.REGISTRY_TOKEN }}
|
||||
|
||||
- name: Build and Push Image
|
||||
uses: docker/build-push-action@v5
|
||||
with:
|
||||
context: .
|
||||
push: true
|
||||
tags: |
|
||||
git.nciphered.com/shaamilahmed/htmx:latest
|
||||
git.nciphered.com/shaamilahmed/htmx:${{ github.sha }}
|
||||
cache-from: type=gha
|
||||
cache-to: type=gha,mode=max
|
||||
|
||||
deploy-droplet:
|
||||
name: Deploy to DigitalOcean Droplet
|
||||
needs: build
|
||||
runs-on: ubuntu-latest
|
||||
if: ${{ secrets.DEPLOY_TARGET == 'droplet' }}
|
||||
steps:
|
||||
- name: Executing remote SSH commands to deploy
|
||||
uses: appleboy/ssh-action@v1.0.3
|
||||
with:
|
||||
host: ${{ secrets.DROPLET_HOST }}
|
||||
username: ${{ secrets.DROPLET_USER }}
|
||||
key: ${{ secrets.DROPLET_SSH_KEY }}
|
||||
script: |
|
||||
# Authenticate with Gitea registry on Droplet
|
||||
docker login -u "${{ github.actor }}" -p "${{ secrets.REGISTRY_TOKEN }}" git.nciphered.com
|
||||
|
||||
# Pull latest image
|
||||
docker pull git.nciphered.com/shaamilahmed/htmx:latest
|
||||
|
||||
# Stop existing container
|
||||
docker rm -f ${{ secrets.APP_CONTAINER_NAME }} || true
|
||||
|
||||
# Run container with user-defined docker flags (e.g., --network, -p)
|
||||
docker run -d \
|
||||
--name ${{ secrets.APP_CONTAINER_NAME }} \
|
||||
${{ secrets.DOCKER_RUN_FLAGS }} \
|
||||
-e DATABASE_URL="${{ secrets.DATABASE_URL_DROPLET }}" \
|
||||
-e DATABASE_NAME="${{ secrets.DATABASE_NAME }}" \
|
||||
-e JWT_SECRET="${{ secrets.JWT_SECRET }}" \
|
||||
-e HOST="0.0.0.0" \
|
||||
-e PORT="${{ secrets.APP_PORT }}" \
|
||||
--restart unless-stopped \
|
||||
git.nciphered.com/shaamilahmed/htmx:latest
|
||||
|
||||
|
||||
deploy-cloudrun:
|
||||
name: Deploy to Google Cloud Run
|
||||
needs: build
|
||||
runs-on: ubuntu-latest
|
||||
if: ${{ secrets.DEPLOY_TARGET == 'cloudrun' }}
|
||||
steps:
|
||||
- name: Checkout Code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Authenticate with Google Cloud
|
||||
uses: google-github-actions/auth@v2
|
||||
with:
|
||||
credentials_json: ${{ secrets.GCP_SA_KEY }}
|
||||
|
||||
- name: Set up Cloud SDK
|
||||
uses: google-github-actions/setup-gcloud@v2
|
||||
|
||||
- name: Configure Docker Authentication
|
||||
run: |
|
||||
gcloud auth configure-docker asia-southeast1-docker.pkg.dev --quiet
|
||||
|
||||
- name: Tag and Push Image to Artifact Registry
|
||||
run: |
|
||||
# Build/Tag for Google Artifact Registry
|
||||
docker tag git.nciphered.com/shaamilahmed/htmx:latest asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||
docker push asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||
|
||||
- name: Deploy to Google Cloud Run
|
||||
uses: google-github-actions/deploy-cloudrun@v2
|
||||
with:
|
||||
service: stick-app
|
||||
image: asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||
region: asia-southeast1
|
||||
env_vars: |
|
||||
DATABASE_URL=${{ secrets.DATABASE_URL_CLOUDRUN }}
|
||||
DATABASE_NAME=${{ secrets.DATABASE_NAME }}
|
||||
JWT_SECRET=${{ secrets.JWT_SECRET }}
|
||||
HOST=0.0.0.0
|
||||
PORT=3007
|
||||
|
||||
@@ -200,3 +200,35 @@ pub async fn delete_task_handler(
|
||||
Ok(Redirect::to("/tasks"))
|
||||
}
|
||||
```
|
||||
|
||||
---
|
||||
|
||||
## Production Deployment to a Cloud Host (DigitalOcean Droplet)
|
||||
|
||||
For production deployments (such as to a DigitalOcean Droplet), the application is fully containerized and configured via standard environment variables.
|
||||
|
||||
The application is completely decoupled from the underlying hosting, networking, and database infrastructure. You are responsible for provisioning the database and supplying the connection configuration.
|
||||
|
||||
### 1. Build the Application Container
|
||||
Build the application Docker image:
|
||||
```bash
|
||||
docker build -t stick-app .
|
||||
```
|
||||
|
||||
### 2. Deploy the Application Container
|
||||
Run the container on your target Docker network, providing the connection details to your pre-existing MongoDB database container through environment variables:
|
||||
```bash
|
||||
docker run -d \
|
||||
--name stick-app \
|
||||
--network your-docker-network \
|
||||
-p 80:3007 \
|
||||
-e DATABASE_URL="mongodb://your-mongodb-host:27017" \
|
||||
-e DATABASE_NAME="stick_db" \
|
||||
-e JWT_SECRET="your_secure_production_jwt_signing_key_at_least_32_chars_long" \
|
||||
-e HOST="0.0.0.0" \
|
||||
-e PORT="3007" \
|
||||
--restart unless-stopped \
|
||||
stick-app
|
||||
```
|
||||
*Note: Adjust the port mapping (`-p`), container name, network name, and `DATABASE_URL` environment variable as necessary to integrate with your custom proxy or container infrastructure.*
|
||||
|
||||
|
||||
Reference in New Issue
Block a user