ci: deploy over Tailscale SSH with self-healing project dir

- Add Tailscale connect step before SSH agent
- Add ensure-project-dir step (clone if missing) before scp
- Move non-sensitive config (Discord IDs, VPS_USER/HOST) to vars
- Rename container to snake_case rpl_skandakra_bot

Author: hendraaagil

.env.example

@@ -16,3 +16,7 @@ CH_RULES_ID=
 # List roles
 ROLE_ADMIN_ID=
 ROLE_MEMBER_ID=
+
+# Deployment keys (required on Actions)
+TS_OAUTH_CLIENT_ID=
+TS_OAUTH_SECRET=

.github/workflows/deploy.yml

@@ -15,38 +15,55 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Create .env file
         run: |
           echo "# Bot credentials" > .env
           echo "BOT_TOKEN=${{ secrets.BOT_TOKEN }}" >> .env
-          echo "BOT_ID=${{ secrets.BOT_ID }}" >> .env
+          echo "BOT_ID=${{ vars.BOT_ID }}" >> .env
           echo -e "\n# Server id" >> .env
-          echo "SERVER_ID=${{ secrets.SERVER_ID }}" >> .env
+          echo "SERVER_ID=${{ vars.SERVER_ID }}" >> .env
           echo -e "\n# List channels" >> .env
-          echo "CH_INTRO_ID=${{ secrets.CH_INTRO_ID }}" >> .env
-          echo "CH_LEAVE_ID=${{ secrets.CH_LEAVE_ID }}" >> .env
-          echo "CH_LOBBY_ID=${{ secrets.CH_LOBBY_ID }}" >> .env
-          echo "CH_LOG_ID=${{ secrets.CH_LOG_ID }}" >> .env
-          echo "CH_ROLE_ID=${{ secrets.CH_ROLE_ID }}" >> .env
-          echo "CH_RULES_ID=${{ secrets.CH_RULES_ID }}" >> .env
+          echo "CH_INTRO_ID=${{ vars.CH_INTRO_ID }}" >> .env
+          echo "CH_LEAVE_ID=${{ vars.CH_LEAVE_ID }}" >> .env
+          echo "CH_LOBBY_ID=${{ vars.CH_LOBBY_ID }}" >> .env
+          echo "CH_LOG_ID=${{ vars.CH_LOG_ID }}" >> .env
+          echo "CH_ROLE_ID=${{ vars.CH_ROLE_ID }}" >> .env
+          echo "CH_RULES_ID=${{ vars.CH_RULES_ID }}" >> .env
           echo -e "\n# List roles" >> .env
-          echo "ROLE_ADMIN_ID=${{ secrets.ROLE_ADMIN_ID }}" >> .env
-          echo "ROLE_MEMBER_ID=${{ secrets.ROLE_MEMBER_ID }}" >> .env
+          echo "ROLE_ADMIN_ID=${{ vars.ROLE_ADMIN_ID }}" >> .env
+          echo "ROLE_MEMBER_ID=${{ vars.ROLE_MEMBER_ID }}" >> .env
+
+      - name: Connect to Tailscale
+        uses: tailscale/github-action@v4
+        with:
+          oauth-client-id: ${{ secrets.TS_OAUTH_CLIENT_ID }}
+          oauth-secret: ${{ secrets.TS_OAUTH_SECRET }}
+          tags: tag:ci
 
       - name: Set up SSH agent for deployment
-        uses: webfactory/ssh-agent@v0.9.0
+        uses: webfactory/ssh-agent@v0.10.0
         with:
           ssh-private-key: ${{ secrets.VPS_PRIVATE_KEY }}
 
+      - name: Ensure project directory exists on VPS
+        run: |
+          ssh -o StrictHostKeyChecking=no ${{ vars.VPS_USER }}@${{ vars.VPS_HOST }} << 'EOF'
+            mkdir -p ~/apps/${{ env.APP_NAME }}
+            cd ~/apps/${{ env.APP_NAME }}
+            if [ ! -d .git ]; then
+              git clone ${{ vars.REPO_URL }} .
+            fi
+          EOF
+
       - name: Copy .env file to VPS
         run: |
-          scp -o StrictHostKeyChecking=no .env ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }}:~/apps/${{ env.APP_NAME }}/
+          scp -o StrictHostKeyChecking=no .env ${{ vars.VPS_USER }}@${{ vars.VPS_HOST }}:~/apps/${{ env.APP_NAME }}/
 
       - name: Deploy to VPS
         run: |
-          ssh -o StrictHostKeyChecking=no ${{ secrets.VPS_USER }}@${{ secrets.VPS_HOST }} << 'EOF'
+          ssh -o StrictHostKeyChecking=no ${{ vars.VPS_USER }}@${{ vars.VPS_HOST }} << 'EOF'
             # Navigate to project directory
             cd ~/apps/${{ env.APP_NAME }}
 

docker-compose.yml

@@ -4,5 +4,5 @@ services:
       context: .
       dockerfile: Dockerfile
     image: rpl-skandakra-bot:latest
-    container_name: rpl-skandakra-bot
+    container_name: rpl_skandakra_bot
     restart: unless-stopped