deploy

.github/workflows/deploy.yml

@@ -0,0 +1,46 @@
+name: Deploy
+
+on:
+  workflow_call:
+
+jobs:
+  deploy:
+
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
+
+      - name: Set Up Context
+        run: |
+          echo ${{ secrets.CA_PEM }} | base64 -d > ${HOME}/ca.pem
+          echo ${{ secrets.CERT_PEM }} | base64 -d > ${HOME}/cert.pem
+          echo ${{ secrets.KEY_PEM }} | base64 -d > ${HOME}/key.pem
+          docker create context remote \
+            --description "remote" \
+            --docker "host=tcp://${{ secrets.DOCKER_REMOTE_HOST }},ca=${HOME}/ca.pem,cert=${HOME}/cert.pem,key=${HOME}/key.pem"
+          docker context use remote
+
+      - name: Create Docker context
+        run: |
+          docker rm -f solidsign
+          docker run \
+            -p 8001:8000 \
+            -v db:/opt/app/db \
+            -d \
+            -e SECRET_KEY="${{ secrets.DJANGO_SECRET_KEY }}" \
+            -e S3_CLIENT_ID="${{ secrets.S3_CLIENT_ID }}" \
+            -e S3_CLIENT_SECRET="${{ secrets.S3_CLIENT_SECRET }}" \
+            -e ENV=prod \
+            --pull always \
+            --restart always \
+            --name solidsign \
+            ${{ vars.IMAGE_NAME }} \
+            gunicorn -b 0.0.0.0:8000 backend.wsgi
+          sleep 5
+          docker exec -it solidsign bash -c 'python3 ./manage.py collectstatic --noinput && python3 ./manage.py migrate'
+

.github/workflows/main.yml

@@ -21,3 +21,9 @@ jobs:
     if: github.event_name != 'pull_request'
     uses: ./.github/workflows/docker.yml
     secrets: inherit
+  deploy:
+    needs: [docker]
+    name: Deploy
+    if: github.event_name != 'pull_request'
+    uses: ./.github/workflows/deploy.yml
+    secrets: inherit