feat: add deploy.yaml

2026-09-22 22:49:24 +07:00
parent d3c3ecd5e6
commit 43aa149148
2 changed files with 80 additions and 61 deletions
@@ -0,0 +1,80 @@
+name: mws-backend
+
+on:
+  push:
+    branches:
+      - main
+
+env:
+  DOCKERHUB_REPO: mws-backend
+  CONTAINER_NAME: mws-backend
+  HOST_PORT: "2000"
+  CONTAINER_PORT: "8080"
+  ASPNETCORE_ENVIRONMENT: Production
+  ENV_FILE: /home/deployer/apps/mws-backend/.env
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    outputs:
+      sha_short: ${{ steps.vars.outputs.sha_short }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set short SHA
+        id: vars
+        run: echo "sha_short=$(echo ${{ github.sha }} | cut -c1-7)" >> $GITHUB_OUTPUT
+
+      - name: Build Docker image
+        run: |
+          IMAGE_BASE="${{ secrets.REGISTRY_USER }}/${{ env.DOCKERHUB_REPO }}"
+          docker build \
+            -t "$IMAGE_BASE:${{ steps.vars.outputs.sha_short }}" \
+            -t "$IMAGE_BASE:latest" .
+
+  push:
+    needs: build
+    runs-on: ubuntu-latest
+    steps:
+      - name: Login and push to Docker Hub
+        run: |
+          IMAGE_BASE="${{ secrets.REGISTRY_USER }}/${{ env.DOCKERHUB_REPO }}"
+          SHA="${{ needs.build.outputs.sha_short }}"
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+          docker push "$IMAGE_BASE:$SHA"
+          docker push "$IMAGE_BASE:latest"
+          docker logout
+
+  deploy:
+    needs: [build, push]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Pull and run new container
+        run: |
+          IMAGE_BASE="${{ secrets.REGISTRY_USER }}/${{ env.DOCKERHUB_REPO }}"
+          SHA="${{ needs.build.outputs.sha_short }}"
+
+          if [ ! -f "${{ env.ENV_FILE }}" ]; then
+            echo "Thiếu ${{ env.ENV_FILE }} trên server"
+            exit 1
+          fi
+
+          echo "${{ secrets.REGISTRY_PASSWORD }}" | docker login -u "${{ secrets.REGISTRY_USER }}" --password-stdin
+          docker pull "$IMAGE_BASE:$SHA"
+          docker logout
+
+          docker stop "${{ env.CONTAINER_NAME }}" 2>/dev/null || true
+          docker rm "${{ env.CONTAINER_NAME }}" 2>/dev/null || true
+
+          docker run -d \
+            --name "${{ env.CONTAINER_NAME }}" \
+            --restart unless-stopped \
+            --env-file "${{ env.ENV_FILE }}" \
+            -e ASPNETCORE_ENVIRONMENT="${{ env.ASPNETCORE_ENVIRONMENT }}" \
+            -p "${{ env.HOST_PORT }}:${{ env.CONTAINER_PORT }}" \
+            "$IMAGE_BASE:$SHA"
+
+          docker images "$IMAGE_BASE" --format '{{.Repository}}:{{.Tag}}' \
+            | grep -v -e ':latest$' -e ":$SHA$" \
+            | xargs -r docker rmi || true