fix: csp allow frame-ancestors from adrianleung.dev #20
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and Deploy | |
| on: | |
| push: | |
| branches: [master] | |
| workflow_dispatch: | |
| inputs: | |
| version: | |
| description: 'Image version' | |
| required: true | |
| env: | |
| REGISTRY: 'registry.digitalocean.com/api-registry' | |
| IMAGE_NAME: 'api' | |
| jobs: | |
| # build_and_push: | |
| # runs-on: ubuntu-latest | |
| # steps: | |
| # - name: Checkout the repo | |
| # uses: actions/checkout@v2 | |
| # - name: Build container image | |
| # run: docker build -t $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7) . | |
| # - name: Install doctl | |
| # uses: digitalocean/action-doctl@v2 | |
| # with: | |
| # token: ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }} | |
| # - name: Log in to DigitalOcean Container Registry with short-lived credentials | |
| # run: doctl registry login --expiry-seconds 600 | |
| # - name: Remove all old images | |
| # run: if [ ! -z "$(doctl registry repository list | grep "$(echo $IMAGE_NAME)")" ]; then doctl registry repository delete-manifest $(echo $IMAGE_NAME) $(doctl registry repository list-tags $(echo $IMAGE_NAME) | grep -o "sha.*") --force; else echo "No repository"; fi | |
| # - name: Push image to DigitalOcean Container Registry | |
| # run: docker push $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7) | |
| deploy: | |
| runs-on: ubuntu-latest | |
| # needs: build_and_push | |
| steps: | |
| - name: Deploy to Digital Ocean droplet via SSH action | |
| uses: appleboy/ssh-action@v0.1.3 | |
| with: | |
| host: ${{ secrets.SSH_HOST }} | |
| username: ${{ secrets.SSH_USER }} | |
| key: ${{ secrets.SSH_KEY }} | |
| # envs: IMAGE_NAME,REGISTRY,{{ secrets.DIGITALOCEAN_ACCESS_TOKEN }},GITHUB_SHA | |
| script: | | |
| cd /app/api | |
| git pull | |
| docker-compose up -d | |
| docker-compose restart | |
| # Login to registry | |
| # docker login -u ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }} -p ${{ secrets.DIGITALOCEAN_ACCESS_TOKEN }} registry.digitalocean.com | |
| # Stop running container | |
| # docker stop $(echo $IMAGE_NAME) | |
| # Remove old container | |
| # docker rm $(echo $IMAGE_NAME) | |
| # Run a new container from a new image | |
| # docker run -d \ | |
| # --restart always \ | |
| # --name $(echo $IMAGE_NAME) \ | |
| # $(echo $REGISTRY)/$(echo $IMAGE_NAME):$(echo $GITHUB_SHA | head -c7) |