68 lines
2.7 KiB
YAML
68 lines
2.7 KiB
YAML
name: Release
|
|
|
|
# Livraison par tag : un tag "vX.Y.Z" déclenche build + push registry + release Gitea
|
|
# + redéploiement de l'app TrueNAS "mkv2avi".
|
|
on:
|
|
push:
|
|
tags:
|
|
- "v*"
|
|
|
|
permissions:
|
|
contents: write # créer la release Gitea
|
|
|
|
env:
|
|
# Registry standalone (Distribution) — auth via secrets REGISTRY_USERNAME/PASSWORD.
|
|
# (Le registry INTÉGRÉ de Gitea git.maisongrondin.fr refuse ces creds.)
|
|
REGISTRY: registry.maisongrondin.fr
|
|
IMAGE: registry.maisongrondin.fr/alexandre/mkv2avi
|
|
|
|
jobs:
|
|
release:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Version depuis le tag
|
|
id: ver
|
|
run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Connexion au registry
|
|
run: echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login "$REGISTRY" -u "${{ secrets.REGISTRY_USERNAME }}" --password-stdin
|
|
|
|
- name: Build & push de l'image
|
|
run: |
|
|
VERSION="${{ steps.ver.outputs.version }}"
|
|
docker build -t "$IMAGE:$VERSION" -t "$IMAGE:latest" .
|
|
docker push "$IMAGE:$VERSION"
|
|
docker push "$IMAGE:latest"
|
|
|
|
- name: Release Gitea (+ compose de prod en asset)
|
|
env:
|
|
TOKEN: ${{ secrets.GITEA_TOKEN }}
|
|
API: ${{ github.server_url }}/api/v1/repos/${{ github.repository }}
|
|
run: |
|
|
VERSION="${{ steps.ver.outputs.version }}"
|
|
TAG="${{ github.ref_name }}"
|
|
BODY="Image Docker : \`$IMAGE:$VERSION\`\n\nDéploiement :\n\`docker compose --env-file .env.prod -f docker-compose.prod.yml up -d\`"
|
|
REL_ID=$(curl -sSf -X POST "$API/releases" \
|
|
-H "Authorization: token $TOKEN" -H "Content-Type: application/json" \
|
|
-d "{\"tag_name\":\"$TAG\",\"name\":\"$TAG\",\"body\":\"$BODY\"}" | jq -r '.id')
|
|
echo "Release créée (id=$REL_ID)"
|
|
for f in docker-compose.truenas.yml.example docker-compose.prod.yml .env.prod.example; do
|
|
curl -sSf -X POST "$API/releases/$REL_ID/assets?name=$f" \
|
|
-H "Authorization: token $TOKEN" \
|
|
-F "attachment=@$f;type=text/plain" >/dev/null
|
|
echo " asset ajouté : $f"
|
|
done
|
|
|
|
# Redéploiement de l'app Custom TrueNAS "mkv2avi" (pull de :latest + restart).
|
|
# ⚠️ Prérequis : l'app "mkv2avi" doit exister sur TrueNAS (sinon 404 → échec).
|
|
# 172.16.11.1 = hôte TrueNAS joignable depuis le conteneur du job.
|
|
- name: Redéployer sur TrueNAS
|
|
run: |
|
|
curl -sf -X POST http://172.16.11.1/api/v2.0/app/redeploy \
|
|
-H "Authorization: Bearer ${{ secrets.TRUENAS_API_KEY }}" \
|
|
-H "Content-Type: application/json" \
|
|
-d '"mkv2avi"'
|