-
Notifications
You must be signed in to change notification settings - Fork 2
74 lines (62 loc) · 2.5 KB
/
CD.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.
# This workflow will build a Java project with Gradle and cache/restore any dependencies to improve the workflow execution time
# For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-java-with-gradle
name: CD
on:
push:
branches: [ "main" ]
permissions:
contents: read
jobs:
build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3
- name: set yaml secret
uses: microsoft/variable-substitution@v1
with:
files: './src/main/resources/application.yml'
env:
spring.datasource.url: ${{ secrets.DATABASE_URL }}
spring.datasource.username: ${{ secrets.DATABASE_USERNAME }}
spring.datasource.password: ${{ secrets.DATABASE_PASSWORD }}
spring.mail.username: ${{ secrets.EMAILHOST }}
spring.mail.password: ${{ secrets.EMAILPASSWORD }}
spring.redis.host: ${{ secrets.REDISHOST }}
token.issuer: ${{ secrets.ISSUER }}
cloud.aws.s3.bucket: ${{ secrets.BUCKETNAME}}
cloud.aws.credentials.access-key: ${{ secrets.S3ACCESSKEY}}
cloud.aws.credentials.secret-key: ${{ secrets.S3SECRETKEY}}
- name: Set up JDK 17
uses: actions/setup-java@v3
with:
java-version: '17'
distribution: 'adopt'
- name: Grant execute permission for gradlew
run: chmod +x gradlew
- name: Build with Gradle
uses: gradle/gradle-build-action@67421db6bd0bf253fb4bd25b31ebb98943c375e1
with:
arguments: build
- name: docker build and push
run: |
docker login -u ${{ secrets.DOCKER_USERNAME }} -p ${{ secrets.DOCKER_PASSWORD }}
docker build -t ${{ secrets.DOCKER_REPO }}/refit-spring .
docker build -f dockerfile-nginx -t ${{ secrets.DOCKER_REPO }}/refit-nginx .
docker push ${{ secrets.DOCKER_REPO }}/refit-spring
docker push ${{ secrets.DOCKER_REPO }}/refit-nginx
- name: Deploy
uses: appleboy/[email protected]
with:
host: ${{ secrets.HOST }}
username: ubuntu
key: ${{ secrets.KEY }}
script: |
sudo docker rm -f $(docker ps -qa)
sudo docker pull ${{ secrets.DOCKER_REPO }}/refit-spring
sudo docker pull ${{ secrets.DOCKER_REPO }}/refit-nginx
docker-compose up -d
docker image prune -f