CI/CD

Author: Layko Andrey

.github/workflows/open-api-ci-cd.yml

@@ -240,7 +240,7 @@ jobs:
                            -e "EVENT_SUBSCRIPTION=true" \
                            -e "WIDGET_HOST=${{ secrets.WIDGET_HOST_PROD }}" \
                            -e "STATE_API_URL=${{ secrets.STATE_API_URL_PROD }}" \
-                           ${{ env.DEPLOY_IMAGE_NAME }}}:${{ env.DEPLOY_IMAGE_TAG }}}
+                           ${{ env.DEPLOY_IMAGE_NAME }}:${{ env.DEPLOY_IMAGE_TAG }}
               "
 
   update-certificates-production:
@@ -253,18 +253,17 @@ jobs:
 
       - name: Setup SSH connection
         run: |
-          sudo apt install openssh-client
-          sudo curl -L "https://github.com/docker/compose/releases/download/1.27.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
           eval $(ssh-agent -s)
+          echo "${{ secrets.DEPLOY_KEY_PROD }}" > deploy_key
+          chmod 600 ./deploy_key
           mkdir -p ~/.ssh
           chmod 700 ~/.ssh
-          echo "${{ secrets.DEPLOY_KEY_PROD }}" | tr -d '\r' | ssh-add - > ~/.ssh/id_rsa
           ssh-keyscan ${{ secrets.DEPLOY_HOST_PROD }} >> ~/.ssh/known_hosts
           chmod 644 ~/.ssh/known_hosts
 
       - name: Setup SSH connection
         run: |
-          ssh ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
+          ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
                 docker run --rm --name certbot  \
                            -v /etc/letsencrypt:/etc/letsencrypt \
                            -v /var/www/certbot:/var/www/certbot \
@@ -274,5 +273,5 @@ jobs:
                            -d ${{ secrets.SERVER_NAME_PROD }} \
                            --renew-by-default -m devops@zensoft.io --eff-email --agree-tos --manual-public-ip-logging-ok
               "
-          ssh ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
+          ssh -i ./deploy_key ${{ secrets.DEPLOY_USER_PROD }}@${{ secrets.DEPLOY_HOST_PROD }} "
                 sudo service nginx reload"