miczek
e05b236aa5
continuous-integration/drone/push Build is passing
Drone also blanks ${SECRET} in the <<'EOS' body before SSH; $$ so
the Pi shell expands the exported login env.
153 lines
3.3 KiB
YAML
153 lines
3.3 KiB
YAML
kind: pipeline
|
|
type: docker
|
|
name: build-and-push
|
|
|
|
platform:
|
|
os: linux
|
|
arch: amd64
|
|
|
|
dns:
|
|
- 192.168.0.64
|
|
|
|
concurrency:
|
|
limit: 1
|
|
|
|
clone:
|
|
depth: 50
|
|
|
|
steps:
|
|
- name: test
|
|
image: oven/bun:1-alpine
|
|
pull: false
|
|
environment:
|
|
BUN_INSTALL_CACHE_DIR: /drone-cache/bun
|
|
commands:
|
|
- bun install --frozen-lockfile
|
|
- bun run test
|
|
|
|
- name: build
|
|
image: oven/bun:1-alpine
|
|
pull: false
|
|
environment:
|
|
BUN_INSTALL_CACHE_DIR: /drone-cache/bun
|
|
STRAVA_CLIENT_ID:
|
|
from_secret: strava_client_id
|
|
STRAVA_REDIRECT_URI:
|
|
from_secret: strava_redirect_uri
|
|
RIOT_REGION:
|
|
from_secret: riot_region
|
|
RIOT_SUMMONER_NAME_LOL:
|
|
from_secret: riot_summoner_name_lol
|
|
RIOT_SUMMONER_NAME_TFT:
|
|
from_secret: riot_summoner_name_tft
|
|
RIOT_TAG_LINE:
|
|
from_secret: riot_tag_line
|
|
FACEIT_USER_ID:
|
|
from_secret: faceit_user_id
|
|
ROCKET_LEAGUE_PLATFORM:
|
|
from_secret: rocket_league_platform
|
|
ROCKET_LEAGUE_USERNAME:
|
|
from_secret: rocket_league_username
|
|
commands:
|
|
- bun run build:ssr
|
|
depends_on:
|
|
- test
|
|
|
|
- name: docker
|
|
image: plugins/docker
|
|
pull: false
|
|
settings:
|
|
repo: registry.zea.lt/miczek/tracker
|
|
registry: registry.zea.lt
|
|
platform: linux/arm64
|
|
username:
|
|
from_secret: registry_username
|
|
password:
|
|
from_secret: registry_password
|
|
build_args_from_env: true
|
|
cache_from:
|
|
- registry.zea.lt/miczek/tracker:latest
|
|
tags:
|
|
- latest
|
|
- ${DRONE_COMMIT_SHA:0:7}
|
|
when:
|
|
branch:
|
|
- main
|
|
- master
|
|
depends_on:
|
|
- build
|
|
|
|
trigger:
|
|
event:
|
|
- push
|
|
- pull_request
|
|
- custom
|
|
|
|
---
|
|
kind: pipeline
|
|
type: docker
|
|
name: deploy
|
|
|
|
platform:
|
|
os: linux
|
|
arch: amd64
|
|
|
|
dns:
|
|
- 192.168.0.64
|
|
|
|
depends_on:
|
|
- build-and-push
|
|
|
|
clone:
|
|
disable: true
|
|
|
|
concurrency:
|
|
limit: 1
|
|
|
|
steps:
|
|
- name: ssh-deploy
|
|
image: alpine:3.20
|
|
pull: false
|
|
environment:
|
|
SSH_HOST:
|
|
from_secret: ssh_host
|
|
SSH_USER:
|
|
from_secret: ssh_user
|
|
SSH_KEY:
|
|
from_secret: ssh_key
|
|
SSH_PORT:
|
|
from_secret: ssh_port
|
|
REGISTRY_USERNAME:
|
|
from_secret: registry_username
|
|
REGISTRY_PASSWORD:
|
|
from_secret: registry_password
|
|
commands:
|
|
- apk add --no-cache openssh-client
|
|
- mkdir -p /root/.ssh && chmod 700 /root/.ssh
|
|
- printenv SSH_KEY > /root/.ssh/id_ed25519 && chmod 600 /root/.ssh/id_ed25519
|
|
# Drone pre-expands ${VAR} (empty for secrets). Use $VAR / $$ so the shell
|
|
# reads the from_secret environment at runtime.
|
|
- |
|
|
ssh -i /root/.ssh/id_ed25519 \
|
|
-p "$${SSH_PORT:-22}" \
|
|
-o StrictHostKeyChecking=accept-new \
|
|
-o BatchMode=yes \
|
|
"$${SSH_USER}@$${SSH_HOST}" \
|
|
"export REGISTRY_USERNAME='$${REGISTRY_USERNAME}' REGISTRY_PASSWORD='$${REGISTRY_PASSWORD}'; bash -s" <<'EOS'
|
|
set -euo pipefail
|
|
echo "$${REGISTRY_PASSWORD}" | docker login registry.zea.lt -u "$${REGISTRY_USERNAME}" --password-stdin
|
|
cd /home/miczek/homelab/tracker
|
|
docker compose pull
|
|
docker compose up -d --remove-orphans
|
|
docker compose ps
|
|
docker logout registry.zea.lt || true
|
|
EOS
|
|
|
|
trigger:
|
|
branch:
|
|
- master
|
|
- main
|
|
event:
|
|
- push
|
|
- custom
|