survey-app/.github/workflows/cd-keycloak.yml at master · xdanielsb/survey-app · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
name: Deploy keycloak

on:
  workflow_dispatch:

jobs:
  deploy:
    runs-on: ubuntu-latest
    environment: keycloak
    concurrency:
      group: deploy-keycloak-${{ github.ref }}
      cancel-in-progress: true

    steps:
      - name: Checkout code
        uses: actions/checkout@v3

      - name: Copy keycloak resources to production server
        uses: appleboy/scp-action@v1
        with:
          host: ${{ secrets.HOST }}
          username: deploy
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          source: "infra/keycloak/,infra/scripts/,Makefile,makefiles/keycloak.mk"
          target: "/home/deploy/survey-app"
          strip_components: 0
          rm: false
          overwrite: true

      - name: Upload .env file
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.HOST }}
          username: deploy
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script: |
            cat << 'EOF' > /home/deploy/survey-app/infra/keycloak/.env
              ${{ secrets.ENV_FILE }}
            EOF

      - name: Upload keycloak custom realm configuration
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.HOST }}
          username: deploy
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script: |
            cat << 'EOF' > /home/deploy/survey-app/infra/keycloak/realm-export.json
              ${{ secrets.REALM_EXPORT }}
            EOF

      - name: Upload Caddyfile
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.HOST }}
          username: deploy
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script: |
            cat << 'EOF' > /home/deploy/survey-app/infra/keycloak/Caddyfile
              ${{ secrets.CADDYFILE_KEYCLOAK }}
            EOF

      - name: Deploy with Docker Compose (Production)
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.HOST }}
          username: deploy
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          script: |
            cd /home/deploy/survey-app
            docker compose -f infra/keycloak/docker-compose.yml down --remove-orphans
            docker compose -f infra/keycloak/docker-compose.yml --env-file infra/keycloak/.env up -d --build