Compare commits
5 Commits
83fbb16b6b
..
main
| Author | SHA1 | Date | |
|---|---|---|---|
| 6ad77f7ef6 | |||
| 3c46cb7c5b | |||
| 6c5c85ec4c | |||
| d7de80e7e0 | |||
| 9d88936b4a |
@@ -0,0 +1,112 @@
|
|||||||
|
name: Production Deployment
|
||||||
|
|
||||||
|
on:
|
||||||
|
push:
|
||||||
|
branches:
|
||||||
|
- main
|
||||||
|
- refactored
|
||||||
|
|
||||||
|
jobs:
|
||||||
|
build:
|
||||||
|
name: Build and Push Docker Image
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
steps:
|
||||||
|
- name: Checkout Code
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Set up Docker Buildx
|
||||||
|
uses: docker/setup-buildx-action@v3
|
||||||
|
|
||||||
|
- name: Log in to Gitea Container Registry
|
||||||
|
uses: docker/login-action@v3
|
||||||
|
with:
|
||||||
|
registry: git.nciphered.com
|
||||||
|
username: ${{ github.actor }}
|
||||||
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
||||||
|
|
||||||
|
- name: Build and Push Image
|
||||||
|
uses: docker/build-push-action@v5
|
||||||
|
with:
|
||||||
|
context: .
|
||||||
|
push: true
|
||||||
|
tags: |
|
||||||
|
git.nciphered.com/shaamilahmed/htmx:latest
|
||||||
|
git.nciphered.com/shaamilahmed/htmx:${{ github.sha }}
|
||||||
|
cache-from: type=gha
|
||||||
|
cache-to: type=gha,mode=max
|
||||||
|
|
||||||
|
deploy-droplet:
|
||||||
|
name: Deploy to DigitalOcean Droplet
|
||||||
|
needs: build
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
if: ${{ secrets.DEPLOY_TARGET == 'droplet' }}
|
||||||
|
steps:
|
||||||
|
- name: Executing remote SSH commands to deploy
|
||||||
|
uses: appleboy/ssh-action@v1.0.3
|
||||||
|
with:
|
||||||
|
host: ${{ secrets.DROPLET_HOST }}
|
||||||
|
username: ${{ secrets.DROPLET_USER }}
|
||||||
|
key: ${{ secrets.DROPLET_SSH_KEY }}
|
||||||
|
script: |
|
||||||
|
# Authenticate with Gitea registry on Droplet
|
||||||
|
docker login -u "${{ github.actor }}" -p "${{ secrets.REGISTRY_TOKEN }}" git.nciphered.com
|
||||||
|
|
||||||
|
# Pull latest image
|
||||||
|
docker pull git.nciphered.com/shaamilahmed/htmx:latest
|
||||||
|
|
||||||
|
# Stop existing container
|
||||||
|
docker rm -f ${{ secrets.APP_CONTAINER_NAME }} || true
|
||||||
|
|
||||||
|
# Run container with user-defined docker flags (e.g., --network, -p)
|
||||||
|
docker run -d \
|
||||||
|
--name ${{ secrets.APP_CONTAINER_NAME }} \
|
||||||
|
${{ secrets.DOCKER_RUN_FLAGS }} \
|
||||||
|
-e DATABASE_URL="${{ secrets.DATABASE_URL_DROPLET }}" \
|
||||||
|
-e DATABASE_NAME="${{ secrets.DATABASE_NAME }}" \
|
||||||
|
-e JWT_SECRET="${{ secrets.JWT_SECRET }}" \
|
||||||
|
-e HOST="0.0.0.0" \
|
||||||
|
-e PORT="${{ secrets.APP_PORT }}" \
|
||||||
|
--restart unless-stopped \
|
||||||
|
git.nciphered.com/shaamilahmed/htmx:latest
|
||||||
|
|
||||||
|
|
||||||
|
deploy-cloudrun:
|
||||||
|
name: Deploy to Google Cloud Run
|
||||||
|
needs: build
|
||||||
|
runs-on: ubuntu-latest
|
||||||
|
if: ${{ secrets.DEPLOY_TARGET == 'cloudrun' }}
|
||||||
|
steps:
|
||||||
|
- name: Checkout Code
|
||||||
|
uses: actions/checkout@v4
|
||||||
|
|
||||||
|
- name: Authenticate with Google Cloud
|
||||||
|
uses: google-github-actions/auth@v2
|
||||||
|
with:
|
||||||
|
credentials_json: ${{ secrets.GCP_SA_KEY }}
|
||||||
|
|
||||||
|
- name: Set up Cloud SDK
|
||||||
|
uses: google-github-actions/setup-gcloud@v2
|
||||||
|
|
||||||
|
- name: Configure Docker Authentication
|
||||||
|
run: |
|
||||||
|
gcloud auth configure-docker asia-southeast1-docker.pkg.dev --quiet
|
||||||
|
|
||||||
|
- name: Tag and Push Image to Artifact Registry
|
||||||
|
run: |
|
||||||
|
# Build/Tag for Google Artifact Registry
|
||||||
|
docker tag git.nciphered.com/shaamilahmed/htmx:latest asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||||
|
docker push asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||||
|
|
||||||
|
- name: Deploy to Google Cloud Run
|
||||||
|
uses: google-github-actions/deploy-cloudrun@v2
|
||||||
|
with:
|
||||||
|
service: stick-app
|
||||||
|
image: asia-southeast1-docker.pkg.dev/${{ secrets.GCP_PROJECT_ID }}/stick/app:latest
|
||||||
|
region: asia-southeast1
|
||||||
|
env_vars: |
|
||||||
|
DATABASE_URL=${{ secrets.DATABASE_URL_CLOUDRUN }}
|
||||||
|
DATABASE_NAME=${{ secrets.DATABASE_NAME }}
|
||||||
|
JWT_SECRET=${{ secrets.JWT_SECRET }}
|
||||||
|
HOST=0.0.0.0
|
||||||
|
PORT=3007
|
||||||
|
|
||||||
@@ -200,3 +200,35 @@ pub async fn delete_task_handler(
|
|||||||
Ok(Redirect::to("/tasks"))
|
Ok(Redirect::to("/tasks"))
|
||||||
}
|
}
|
||||||
```
|
```
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
|
## Production Deployment to a Cloud Host (DigitalOcean Droplet)
|
||||||
|
|
||||||
|
For production deployments (such as to a DigitalOcean Droplet), the application is fully containerized and configured via standard environment variables.
|
||||||
|
|
||||||
|
The application is completely decoupled from the underlying hosting, networking, and database infrastructure. You are responsible for provisioning the database and supplying the connection configuration.
|
||||||
|
|
||||||
|
### 1. Build the Application Container
|
||||||
|
Build the application Docker image:
|
||||||
|
```bash
|
||||||
|
docker build -t stick-app .
|
||||||
|
```
|
||||||
|
|
||||||
|
### 2. Deploy the Application Container
|
||||||
|
Run the container on your target Docker network, providing the connection details to your pre-existing MongoDB database container through environment variables:
|
||||||
|
```bash
|
||||||
|
docker run -d \
|
||||||
|
--name stick-app \
|
||||||
|
--network your-docker-network \
|
||||||
|
-p 80:3007 \
|
||||||
|
-e DATABASE_URL="mongodb://your-mongodb-host:27017" \
|
||||||
|
-e DATABASE_NAME="stick_db" \
|
||||||
|
-e JWT_SECRET="your_secure_production_jwt_signing_key_at_least_32_chars_long" \
|
||||||
|
-e HOST="0.0.0.0" \
|
||||||
|
-e PORT="3007" \
|
||||||
|
--restart unless-stopped \
|
||||||
|
stick-app
|
||||||
|
```
|
||||||
|
*Note: Adjust the port mapping (`-p`), container name, network name, and `DATABASE_URL` environment variable as necessary to integrate with your custom proxy or container infrastructure.*
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user