workflow improvement #24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy to EC2 | |
| on: | |
| push: | |
| branches: | |
| - "main" | |
| - "CI/CD" | |
| workflow_dispatch: | |
| jobs: | |
| deploy: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout code | |
| uses: actions/checkout@v4 | |
| - name: Set up SSH key | |
| run: | | |
| mkdir -p ~/.ssh | |
| echo "${{ secrets.EC2_SSH_KEY }}" > ~/.ssh/id_rsa | |
| chmod 600 ~/.ssh/id_rsa | |
| - name: Add SSH config | |
| run: | | |
| printf "Host ec2-docker\nHostName %s\nUser ubuntu\nIdentityFile ~/.ssh/id_rsa\nStrictHostKeyChecking no\nProxyCommand ssh -W %%h:%%p -q pure@xanderbit.cgitverse.com\n" "${{ secrets.EC2_HOST }}" > ~/.ssh/config | |
| chmod 600 ~/.ssh/config | |
| - name: Debug SSH key | |
| run: | | |
| echo "=== SSH dir ===" | |
| ls -la ~/.ssh | |
| echo "=== Key content (first lines) ===" | |
| head -n 5 ~/.ssh/id_rsa | |
| - name: Create .env file | |
| run: | | |
| echo "DB_HOST=${{ secrets.DB_HOST }}" >> .env | |
| echo "DB_PORT=${{ secrets.DB_PORT }}" >> .env | |
| echo "DB_NAME=${{ secrets.DB_NAME }}" >> .env | |
| echo "DB_USER=${{ secrets.DB_USER }}" >> .env | |
| echo "DB_PASSWORD=${{ secrets.DB_PASSWORD }}" >> .env | |
| echo "REDIS_HOST=${{ secrets.REDIS_HOST }}" >> .env | |
| echo "REDIS_PORT=${{ secrets.REDIS_PORT }}" >> .env | |
| - name: Install Ansible | |
| run: | | |
| sudo apt-get update | |
| sudo apt-get install -y ansible | |
| - name: Upgrade Ansible | |
| run: | | |
| pip install --upgrade ansible | |
| - name: Run Ansible Playbook | |
| run: | | |
| ansible-playbook ansible/deploy.yml \ | |
| -i ansible/inventory.ini \ | |
| --private-key ~/.ssh/id_rsa \ | |
| -u ubuntu |