98 lines
3.0 KiB
YAML
98 lines
3.0 KiB
YAML
name: Publish Docker Image
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
proxy_mode:
|
|
description: 'Proxy mode (nginx o traefik)'
|
|
required: true
|
|
default: 'nginx'
|
|
type: choice
|
|
options:
|
|
- nginx
|
|
- traefik
|
|
push:
|
|
tags:
|
|
- 'v*'
|
|
|
|
env:
|
|
IMAGE_NAME: ${{ gitea.repository }}
|
|
IMAGE_TAG: ${{ gitea.ref_name }}
|
|
# Registry (default Docker Hub, cambia con un secret se usi un registry privato)
|
|
REGISTRY: ${{ secrets.DOCKER_REGISTRY || 'docker.io' }}
|
|
# Modalità proxy
|
|
PROXY_MODE: ${{ inputs.proxy_mode || 'nginx' }}
|
|
# Container name sulla VPS
|
|
CONTAINER_NAME: test-app
|
|
# Porta host per modalità nginx
|
|
HOST_PORT: ${{ secrets.HOST_PORT || '8080' }}
|
|
|
|
jobs:
|
|
build-and-publish:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Log in to container registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.REGISTRY }}
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_PASSWORD }}
|
|
|
|
- name: Build and push Docker image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
push: true
|
|
tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.IMAGE_TAG }}
|
|
|
|
- name: Deploy to VPS via SSH
|
|
uses: appleboy/ssh-action@v1
|
|
with:
|
|
host: ${{ secrets.VPS_HOST }}
|
|
username: ${{ secrets.VPS_USER }}
|
|
key: ${{ secrets.VPS_SSH_KEY }}
|
|
port: ${{ secrets.VPS_PORT || '22' }}
|
|
envs: IMAGE_NAME,IMAGE_TAG,REGISTRY,PROXY_MODE,CONTAINER_NAME,HOST_PORT
|
|
script: |
|
|
set -e
|
|
|
|
FULL_IMAGE="$REGISTRY/$IMAGE_NAME:$IMAGE_TAG"
|
|
|
|
echo "=== Pull immagine ==="
|
|
echo "$DOCKER_PASSWORD" | docker login "$REGISTRY" -u "$DOCKER_USERNAME" --password-stdin 2>/dev/null || true
|
|
docker pull "$FULL_IMAGE"
|
|
|
|
echo "=== Ferma e rimuovi container esistente ==="
|
|
docker stop "$CONTAINER_NAME" 2>/dev/null || true
|
|
docker rm "$CONTAINER_NAME" 2>/dev/null || true
|
|
|
|
echo "=== Avvia container (proxy: $PROXY_MODE) ==="
|
|
|
|
if [ "$PROXY_MODE" = "traefik" ]; then
|
|
docker run -d \
|
|
--name "$CONTAINER_NAME" \
|
|
--network traefik \
|
|
--label "traefik.enable=true" \
|
|
--label "traefik.http.routers.$CONTAINER_NAME.rule=Host(\`${{ secrets.DOMAIN }}\`)" \
|
|
--label "traefik.http.services.$CONTAINER_NAME.loadbalancer.server.port=80" \
|
|
"$FULL_IMAGE"
|
|
else
|
|
docker run -d \
|
|
--name "$CONTAINER_NAME" \
|
|
-p "$HOST_PORT:80" \
|
|
"$FULL_IMAGE"
|
|
fi
|
|
|
|
echo "=== Pulizia ==="
|
|
docker image prune -f
|
|
|
|
echo "=== Deploy completato ==="
|
|
echo "Immagine: $FULL_IMAGE"
|
|
echo "Proxy: $PROXY_MODE"
|