feat(deploy): add release automation and systemd service

The changes include:
- Renaming build.yml to build-release.yml and expanding its functionality to create GitHub releases
- Adding release job to generate timestamped releases with artifacts
- Including systemd service file for production deployment
- Setting required permissions for release creation
- Streamlining artifact handling across build and release jobs

Author: ooopus

.github/workflows/build.yml .github/workflows/build-release.yml.github/workflows/build.yml renamed to .github/workflows/build-release.yml

@@ -1,24 +1,29 @@
-name: Build Project
+# 工作流名称
+name: Build and Release Project
 
+# 触发工作流的事件
 on:
   push:
     branches:
-      - main
-  workflow_dispatch:
+      - main # 仅在 main 分支有 push 时触发
+  workflow_dispatch: # 允许手动触发
+
+# 为工作流授予创建 Release 的权限
+permissions:
+  contents: write
 
 jobs:
+  # 构建任务
   build:
     name: Build for ${{ matrix.target }}
-    # 为每个目标选择对应的原生操作系统
     runs-on: ${{ matrix.os }}
     strategy:
       fail-fast: false
       matrix:
-        # 定义目标和操作系统的对应关系
         include:
           - target: x86_64-unknown-linux-gnu
             os: ubuntu-latest
-          - target: x86_64-pc-windows-msvc # <--- 这里已从 gnu 更改为 msvc
+          - target: x86_64-pc-windows-msvc
             os: windows-latest
           - target: x86_64-apple-darwin
             os: macos-latest
@@ -32,17 +37,10 @@ jobs:
         with:
           targets: ${{ matrix.target }}
 
-      # --- 特定于操作系统的依赖安装 ---
       - name: Install dependencies (Linux)
         if: runner.os == 'Linux'
         run: sudo apt-get update && sudo apt-get install -y libssl-dev pkg-config
 
-      # Windows (MSVC) 和 macOS 通常不需要手动安装 OpenSSL，Rust 的 openssl-sys crate 能处理好。
-      # 如果在 Windows 上遇到问题，可以考虑在 Cargo.toml 中为 openssl 启用 "vendored" 特性。
-      # - name: Install dependencies (Windows)
-      #   if: runner.os == 'Windows'
-      #   run: choco install ... # 如果有需要
-
       - name: Cache dependencies
         uses: actions/cache@v4
         with:
@@ -52,22 +50,20 @@ jobs:
             ~/.cargo/registry/cache/
             ~/.cargo/git/db/
             target/
-          # Key 需要包含操作系统，以防缓存冲突
           key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
           restore-keys: |
             ${{ runner.os }}-cargo-
 
       - name: Build binary with cargo
         run: cargo build --release --target ${{ matrix.target }} --verbose
 
-      - name: Prepare artifact
+      - name: Prepare artifact name and path
         id: prepare_artifact
         shell: bash
         run: |
-          BIN_NAME="telembed" # <-- 你的包名
+          BIN_NAME="telembed"
           TARGET="${{ matrix.target }}"
 
-          # 根据操作系统设置正确的二进制路径和后缀
           if [[ "${{ runner.os }}" == "Windows" ]]; then
             BIN_PATH="target/${TARGET}/release/${BIN_NAME}.exe"
             ARTIFACT_NAME="${BIN_NAME}-${TARGET}.exe"
@@ -79,8 +75,43 @@ jobs:
           echo "artifact_name=${ARTIFACT_NAME}" >> $GITHUB_OUTPUT
           echo "bin_path=${BIN_PATH}" >> $GITHUB_OUTPUT
 
-      - name: Upload artifact
+      # 此步骤上传的 artifact 会被自动压缩成 zip，但这只是为了在 job 之间传递
+      - name: Upload artifact for release job
         uses: actions/upload-artifact@v4
         with:
           name: ${{ steps.prepare_artifact.outputs.artifact_name }}
           path: ${{ steps.prepare_artifact.outputs.bin_path }}
+
+  # 发布任务
+  release:
+    name: Create GitHub Release
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Generate timestamp tag
+        id: generate_tag
+        run: echo "TAG=$(date +'%Y.%m.%d.%H%M%S')" >> $GITHUB_OUTPUT
+
+      # 此步骤会下载所有构建产物，并自动解压
+      - name: Download all build artifacts
+        uses: actions/download-artifact@v4
+        with:
+          path: artifacts/
+
+      - name: Display structure of downloaded files
+        run: ls -R artifacts
+
+      # 重要提示:
+      # 上一步的 download-artifact 会自动解压在 build 任务中生成的压缩包。
+      # 因此，'artifacts' 目录中现在存放的是原始的、未压缩的二进制文件。
+      # 下面的步骤会将这些原始二进制文件直接作为附件上传到 Release 中。
+      - name: Create Release and Upload Assets
+        uses: softprops/action-gh-release@v2
+        with:
+          tag_name: ${{ steps.generate_tag.outputs.TAG }}
+          name: "Release ${{ steps.generate_tag.outputs.TAG }}"
+          generate_release_notes: true
+          # 'files' 通配符会匹配 'artifacts' 目录下的所有文件
+          # 并将它们作为独立的、未压缩的文件上传
+          files: |
+            artifacts/**/*

telembed.service

@@ -0,0 +1,22 @@
+[Unit]
+Description=Telegram QA Bot
+After=network.target
+StartLimitIntervalSec=0
+
+[Service]
+Type=simple
+
+Restart=always）
+RestartSec=5
+
+User=telembed
+Group=telembed
+
+WorkingDirectory=/opt/telembed
+
+ExecStart=/usr/local/bin/telembed
+
+Environment="XDG_CONFIG_HOME=/opt"
+
+[Install]
+WantedBy=multi-user.target