9b3898e43c
All checks were successful
Deploy to production / deploy (push) Successful in 3m1s
- Renamed workflow from "Deploy yourpart (blue-green)" to "Deploy to production" for clarity. - Removed environment variables for SSH configuration and replaced them with direct references to secrets for improved security. - Updated SSH connection and deployment script steps to utilize secrets for host, port, and user, enhancing the deployment process.
34 lines
953 B
YAML
34 lines
953 B
YAML
name: Deploy to production
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Prepare SSH
|
|
run: |
|
|
mkdir -p ~/.ssh
|
|
printf "%s" "${{ secrets.PROD_SSH_KEY }}" > ~/.ssh/id_ed25519
|
|
chmod 600 ~/.ssh/id_ed25519
|
|
ssh-keyscan -p "${{ secrets.PROD_PORT }}" "${{ secrets.PROD_HOST }}" >> ~/.ssh/known_hosts
|
|
|
|
- name: Test SSH connection
|
|
run: |
|
|
ssh -i ~/.ssh/id_ed25519 \
|
|
-o StrictHostKeyChecking=no \
|
|
-o BatchMode=yes \
|
|
-p "${{ secrets.PROD_PORT }}" \
|
|
"${{ secrets.PROD_USER }}@${{ secrets.PROD_HOST }}" \
|
|
"echo SSH OK"
|
|
|
|
- name: Run deployment script
|
|
run: |
|
|
ssh -i ~/.ssh/id_ed25519 \
|
|
-p "${{ secrets.PROD_PORT }}" \
|
|
"${{ secrets.PROD_USER }}@${{ secrets.PROD_HOST }}" \
|
|
"/home/tsschulz/deploy-yourpart-bluegreen.sh" |