62 lines
2 KiB
YAML
62 lines
2 KiB
YAML
name: Build and Deploy
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
schedule:
|
|
- cron: '0 * * * *' # hourly
|
|
jobs:
|
|
build:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Build application
|
|
run: |
|
|
docker build . -f Dockerfile -t "adriano_fyi:${GITHUB_SHA}"
|
|
mkdir out
|
|
docker save "adriano_fyi:${GITHUB_SHA}" -o "out/adriano_fyi-${GITHUB_SHA}.tar"
|
|
- name: S3 Sync
|
|
uses: jakejarvis/s3-sync-action@v0.5.1
|
|
env:
|
|
AWS_ACCESS_KEY_ID: "TWEELLU28RTD4IUQJXRT"
|
|
AWS_SECRET_ACCESS_KEY: ${{ secrets.LINODE_SECRET_ACCESS_KEY }}
|
|
AWS_S3_BUCKET: "adriano-fyi-static-site"
|
|
AWS_REGION: "us-east-1"
|
|
AWS_S3_ENDPOINT: "https://us-east-1.linodeobjects.com"
|
|
SOURCE_DIR: "out"
|
|
deploy:
|
|
needs: build
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 0
|
|
- name: Tailscale login
|
|
uses: tailscale/github-action@v3
|
|
with:
|
|
version: 1.86.2
|
|
oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
|
|
oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
|
|
tags: tag:github-action
|
|
env:
|
|
ADDITIONAL_ARGS: "--accept-dns"
|
|
- name: Setup `nomad`
|
|
uses: hashicorp/setup-nomad@main
|
|
id: setup
|
|
with:
|
|
version: 1.11.3
|
|
- name: Deploy nomad job
|
|
run: |
|
|
tailscale status
|
|
# Discover active Nomad server via Tailscale
|
|
NOMAD_SERVER_IP=$(tailscale status --json | jq -r '.Peer[] | select(.Tags[]? == "tag:nomad-server") | select(.Online == true) | .TailscaleIPs[0]' | head -n1)
|
|
echo "Using Nomad server: $NOMAD_SERVER_IP"
|
|
export NOMAD_ADDR="http://${NOMAD_SERVER_IP}:4646"
|
|
nomad job run -var version=${GITHUB_SHA} -var secret_access_key=${{secrets.AWS_SECRET_ACCESS_KEY}} job.nomad.hcl
|
|
env:
|
|
NOMAD_TOKEN: ${{ secrets.NOMAD_TOKEN }}
|