- scp 대신 tar+ssh 파이프라인 사용 - .git 폴더 제외하여 권한 충돌 방지 - 기존 디렉토리 삭제 후 재생성으로 깨끗한 배포 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
40 lines
1.2 KiB
YAML
40 lines
1.2 KiB
YAML
name: Deploy to Ubuntu Server
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout source
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup SSH key
|
|
uses: webfactory/ssh-agent@v0.9.0
|
|
with:
|
|
ssh-private-key: ${{ secrets.NAS_SSH_KEY_ADMIN }}
|
|
|
|
- name: Deploy files via SCP
|
|
env:
|
|
HOST: ${{ secrets.NAS_HOST }}
|
|
PORT: ${{ secrets.NAS_PORT }}
|
|
USER: ${{ secrets.NAS_USER }}
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=no -p $PORT $USER@$HOST "rm -rf ~/robeing-nginx && mkdir -p ~/robeing-nginx"
|
|
tar --exclude='.git' -czf - . | ssh -o StrictHostKeyChecking=no -p $PORT $USER@$HOST "cd ~/robeing-nginx && tar -xzf -"
|
|
|
|
- name: Start services via SSH
|
|
env:
|
|
HOST: ${{ secrets.NAS_HOST }}
|
|
PORT: ${{ secrets.NAS_PORT }}
|
|
USER: ${{ secrets.NAS_USER }}
|
|
run: |
|
|
ssh -o StrictHostKeyChecking=no -p $PORT $USER@$HOST << 'EOF'
|
|
cd ~/robeing-nginx
|
|
mkdir -p ssl certbot-webroot
|
|
docker compose down || true
|
|
docker compose up -d
|
|
EOF |