Use HOME variable #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # vim: set colorcolumn=: | |
| name: deployment | |
| on: | |
| push: | |
| branches: | |
| - develop | |
| env: | |
| PHP_VERSION: '8.1' | |
| permissions: | |
| contents: read | |
| jobs: | |
| linter: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@v4 | |
| - name: Update apt cache | |
| run: sudo apt-get update | |
| - name: Install php ${{ env.PHP_VERSION }} | |
| run: sudo apt-get install php${{ env.PHP_VERSION }}-cli | |
| - name: Validate composer.json and composer.lock | |
| run: composer validate --strict | |
| - name: Cache Composer packages | |
| id: composer-cache | |
| uses: actions/cache@v4 | |
| with: | |
| path: lib | |
| key: ${{ runner.os }}-php-${{ hashFiles('**/composer.lock') }} | |
| restore-keys: | | |
| ${{ runner.os }}-php- | |
| - name: Install composer/vendor dependencies | |
| run: composer install --prefer-dist --no-progress --ignore-platform-reqs | |
| - name: Validate PHP syntax | |
| run: bash -c 'set -e;for file in $(find ./src -type f -regex ".*\.\(php\|phtml\)" -print); do php -e -l -f "$file"; done' | |
| deploy: | |
| needs: linter | |
| runs-on: ubuntu-latest | |
| environment: production | |
| steps: | |
| - name: Checkout Code | |
| uses: actions/checkout@v4 | |
| - name: Compress Artifacts | |
| run: zip -r project.zip . | |
| - name: Deploy to Remote | |
| env: | |
| SSH_HOST: ${{ secrets.SSH_HOST }} | |
| SSH_PORT: ${{ secrets.SSH_PORT }} | |
| SSH_USER: ${{ secrets.SSH_USER }} | |
| SSH_KEY: ${{ secrets.SSH_KEY }} # SSH private key stored as a GitHub secret | |
| SSH_WEB_PATH: ${{ secrets.SSH_WEB_PATH }} | |
| BRANCH_NAME: ${{ github.ref_name }} | |
| run: | | |
| #!/usr/bin/env bash | |
| set -ex -o pipefail | |
| # Save the private key for SSH | |
| mkdir -pv "${HOME}/.ssh" | |
| echo "${SSH_KEY}" > "${HOME}/.ssh/id_${SSH_USER}" | |
| chmod -v 400 "${HOME}/.ssh/id_${SSH_USER}" | |
| # Copy the artifact to the Remote | |
| scp -i "${HOME}/.ssh/id_${SSH_USER}" -P "${SSH_PORT}" project.zip "${SSH_USER}@${SSH_HOST}:${SSH_WEB_PATH}/${BRANCH_NAME}" | |
| # Connect to the Remote and unzip the project | |
| ssh -i "${HOME}/.ssh/id_${SSH_USER}" -p "${SSH_PORT}" "${SSH_USER}@${SSH_HOST}" << EOF | |
| mkdir -p ${SSH_WEB_PATH}/${BRANCH_NAME} | |
| cd ${SSH_WEB_PATH}/${BRANCH_NAME} | |
| unzip ./project.zip | |
| rm ./project.zip | |
| EOF | |
| # Cleanup the secret | |
| rm -rfv "${HOME}/.ssh/id_${SSH_USER}" "${HOME}/.ssh/id_${SSH_USER}.pub" |