ucef/as-talange
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): check all SSH key secret variants and force rsync deployment to DB server
AS Talange CI/CD Pipeline / Build & Run Unit Tests (push) Successful in 5m0s
Details
AS Talange CI/CD Pipeline / Deploy to Test Environment (push) Successful in 2m18s
Details

Browse Source
This commit is contained in:
ucef
2026-09-03 08:03:03 +02:00
parent 3e9daef770
commit 0d3270e852
1 changed files with 16 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci-prod.yml
+17 -14
View File
@@ -119,24 +119,27 @@ jobs:
env: env:
DB_SERVER_HOST: ${{ secrets.PROD_DB_HOST }} DB_SERVER_HOST: ${{ secrets.PROD_DB_HOST }}
DB_SERVER_USER: ${{ secrets.PROD_DB_SSH_USER }} DB_SERVER_USER: ${{ secrets.PROD_DB_SSH_USER }}
SSH_KEY: ${{ secrets.PROD_DB_SSH_KEY }} PROD_DB_SSH_KEY: ${{ secrets.PROD_DB_SSH_KEY }}
SSH_KEY_PATH_SECRET: ${{ secrets.SSH_KEY_PATH }}
SSH_KEY_SECRET: ${{ secrets.SSH_KEY }}
run: | run: |
TARGET_HOST="${DB_SERVER_HOST:-10.8.0.3}" TARGET_HOST="${DB_SERVER_HOST:-10.8.0.3}"
TARGET_USER="${DB_SERVER_USER:-root}" TARGET_USER="${DB_SERVER_USER:-root}"
DEST_DIR="/opt/as-talange" DEST_DIR="/opt/as-talange"
if [ -n "${SSH_KEY}" ]; then apk add --no-cache openssh-client rsync
apk add --no-cache openssh-client rsync
mkdir -p ~/.ssh
echo "${SSH_KEY}" > ~/.ssh/id_rsa
chmod 600 ~/.ssh/id_rsa
echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..." KEY_CONTENT="${PROD_DB_SSH_KEY:-${SSH_KEY_PATH_SECRET:-${SSH_KEY_SECRET}}}"
ssh -o StrictHostKeyChecking=no "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts"
rsync -avz -e "ssh -o StrictHostKeyChecking=no" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/" if [ -n "${KEY_CONTENT}" ] && [ "${KEY_CONTENT:0:1}" = "-" ]; then
rsync -avz -e "ssh -o StrictHostKeyChecking=no" .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env" mkdir -p ~/.ssh
ssh -o StrictHostKeyChecking=no "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh" echo "${KEY_CONTENT}" > ~/.ssh/id_rsa
echo "Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!" chmod 600 ~/.ssh/id_rsa
else
echo "NOTICE: PROD_DB_SSH_KEY secret not defined, skipping remote deployment of backup script to DB Server."
fi fi
echo "Deploying backup script and .env to DB Server (${TARGET_USER}@${TARGET_HOST}:${DEST_DIR})..."
ssh -o StrictHostKeyChecking=no "${TARGET_USER}@${TARGET_HOST}" "mkdir -p ${DEST_DIR}/scripts"
rsync -avz -e "ssh -o StrictHostKeyChecking=no" scripts/backup_db.sh "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/scripts/"
rsync -avz -e "ssh -o StrictHostKeyChecking=no" .env "${TARGET_USER}@${TARGET_HOST}:${DEST_DIR}/.env"
ssh -o StrictHostKeyChecking=no "${TARGET_USER}@${TARGET_HOST}" "chmod +x ${DEST_DIR}/scripts/backup_db.sh"
echo "Backup script and .env deployed successfully to ${DEST_DIR} on DB Server!"