cb51186830
- Introduced `docker-compose.prod.yml` to define services for production deployment, including PostgreSQL, FastAPI backend, frontend, and Redis. - Created `env.production.template` to outline necessary environment variables for production, ensuring sensitive data is not committed. - Added `PRODUCTION.md` as a deployment guide detailing the setup process using Docker Compose and Gitea Actions for CI/CD. - Implemented Gitea workflows for build, test, and deployment processes to streamline production updates. - Updated backend and frontend Dockerfiles for optimized production builds and configurations. - Enhanced application settings to support environment-specific configurations, including CORS and health checks.
78 lines
3.4 KiB
YAML
78 lines
3.4 KiB
YAML
name: Deploy to Production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main # Trigger deployment only on pushes to main
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v3
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v2
|
|
|
|
- name: Log in to Docker Hub (or your registry)
|
|
uses: docker/login-action@v2
|
|
with:
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
# For Gitea Container Registry, you might use:
|
|
# registry: your-gitea-instance.com:5000
|
|
# username: ${{ gitea.actor }}
|
|
# password: ${{ secrets.GITEA_TOKEN }}
|
|
|
|
- name: Build and push backend image
|
|
uses: docker/build-push-action@v4
|
|
with:
|
|
context: ./be
|
|
file: ./be/Dockerfile.prod
|
|
push: true
|
|
tags: ${{ secrets.DOCKER_USERNAME }}/mitlist-backend:latest # Replace with your image name
|
|
# Gitea registry example: your-gitea-instance.com:5000/${{ gitea.repository_owner }}/${{ gitea.repository_name }}-backend:latest
|
|
|
|
- name: Build and push frontend image
|
|
uses: docker/build-push-action@v4
|
|
with:
|
|
context: ./fe
|
|
file: ./fe/Dockerfile.prod
|
|
push: true
|
|
tags: ${{ secrets.DOCKER_USERNAME }}/mitlist-frontend:latest # Replace with your image name
|
|
# Gitea registry example: your-gitea-instance.com:5000/${{ gitea.repository_owner }}/${{ gitea.repository_name }}-frontend:latest
|
|
build-args: |
|
|
VITE_API_URL=${{ secrets.VITE_API_URL }}
|
|
VITE_SENTRY_DSN=${{ secrets.VITE_SENTRY_DSN }}
|
|
|
|
- name: Deploy to server
|
|
uses: appleboy/ssh-action@master
|
|
with:
|
|
host: ${{ secrets.SERVER_HOST }}
|
|
username: ${{ secrets.SERVER_USERNAME }}
|
|
key: ${{ secrets.SSH_PRIVATE_KEY }}
|
|
port: ${{ secrets.SERVER_PORT || 22 }}
|
|
script: |
|
|
cd /path/to/your/app # e.g., /srv/mitlist
|
|
echo "POSTGRES_USER=${{ secrets.POSTGRES_USER }}" > .env.production
|
|
echo "POSTGRES_PASSWORD=${{ secrets.POSTGRES_PASSWORD }}" >> .env.production
|
|
echo "POSTGRES_DB=${{ secrets.POSTGRES_DB }}" >> .env.production
|
|
echo "DATABASE_URL=${{ secrets.DATABASE_URL }}" >> .env.production
|
|
echo "SECRET_KEY=${{ secrets.SECRET_KEY }}" >> .env.production
|
|
echo "SESSION_SECRET_KEY=${{ secrets.SESSION_SECRET_KEY }}" >> .env.production
|
|
echo "GEMINI_API_KEY=${{ secrets.GEMINI_API_KEY }}" >> .env.production
|
|
echo "REDIS_PASSWORD=${{ secrets.REDIS_PASSWORD }}" >> .env.production
|
|
echo "SENTRY_DSN=${{ secrets.SENTRY_DSN }}" >> .env.production
|
|
echo "CORS_ORIGINS=${{ secrets.CORS_ORIGINS }}" >> .env.production
|
|
echo "FRONTEND_URL=${{ secrets.FRONTEND_URL }}" >> .env.production
|
|
echo "VITE_API_URL=${{ secrets.VITE_API_URL }}" >> .env.production
|
|
echo "VITE_SENTRY_DSN=${{ secrets.VITE_SENTRY_DSN }}" >> .env.production
|
|
echo "ENVIRONMENT=production" >> .env.production
|
|
echo "LOG_LEVEL=INFO" >> .env.production
|
|
|
|
# Ensure docker-compose.prod.yml is present on the server or copy it
|
|
# git pull # If repo is cloned on server
|
|
docker-compose -f docker-compose.prod.yml pull
|
|
docker-compose -f docker-compose.prod.yml up -d --remove-orphans
|
|
docker image prune -af |