mini-grafana/.github/workflows/deploy-monitoring.yml at b918ab1c6fd97d7fe125a8d6ae80a775ff1ec9fa · khalifaalhasan/mini-grafana · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
name: CD — Deploy Monitoring Stack (Loki + Alloy)

on:
  push:
    branches: [ "main", "production" ]
    paths:
      - "monitoring/**"
      - '.github/workflows/deploy-monitoring.yml'
      - '!**/**/*.md'

  workflow_dispatch:

jobs:
  deploy-monitoring:
    name: Deploy Monitoring Stack via SSH
    runs-on: ubuntu-latest
    environment: staging

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Copy Monitoring Docker Compose & Config Files via SCP
        uses: appleboy/scp-action@v0.1.7
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          port: ${{ secrets.SERVER_PORT || '22' }}
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          # 1. Source tetap dari folder monitoring
          source: "monitoring/docker-compose.yml,monitoring/config.alloy,monitoring/loki-config.yml"
          target: "${{ vars.DEPLOY_PATH_MONITORING || secrets.DEPLOY_PATH_MONITORING || format('/home/{0}/mini-grafana-monitoring', secrets.SERVER_USER) }}"
          # 2. TAMBAHKAN INI: strip_components=1 membuang prefix folder "monitoring/"
          # sehingga file langsung jatuh di root target folder tanpa bikin double folder!
          strip_components: 1

      - name: Deploy Monitoring Stack to Server via SSH
        uses: appleboy/ssh-action@v1.0.3
        with:
          host: ${{ secrets.SERVER_HOST }}
          username: ${{ secrets.SERVER_USER }}
          port: ${{ secrets.SERVER_PORT || '22' }}
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script_stop: true
          script: |
            echo "=========================================================="
            echo " [1/3] Masuk ke direktori deployment"
            echo "=========================================================="
            DEPLOY_DIR="${{ vars.DEPLOY_PATH_MONITORING || secrets.DEPLOY_PATH_MONITORING }}"
            echo "Directori monitoring deployment: $DEPLOY_DIR"
            mkdir -p "$DEPLOY_DIR"
            cd "$DEPLOY_DIR" || exit 1

            # CATATAN: Blok 'git fetch & git reset' DIHAPUS TOTAL karena kita pakai SCP!

            echo "=========================================================="
            echo " [2/3] Menulis file .env dari secret ENV_MONITORING"
            echo "=========================================================="
            cat <<'EOF_ENV' > .env
            ${{ secrets.ENV_MONITORING }}
            EOF_ENV
            chmod 600 .env

            echo "=========================================================="
            echo " [3/3] Merestart Container Monitoring (Loki + Alloy)"
            echo "=========================================================="
            docker network inspect proxy_network >/dev/null 2>&1 || docker network create proxy_network
            docker compose up -d --force-recreate
            echo "✅ Deployment Monitoring Stack selesai!"