Add Gitea Actions CI/CD

Every push and pull request installs, tests and builds the game. Pushes to main then ship the sources to the server over SSH and restart the site with docker compose; the deploy step is skipped until the DEPLOY_HOST / DEPLOY_SSH_KEY secrets exist. An optional HEALTH_URL is polled after deploying. The Gitea server is now the `origin` remote; GitHub remains as `github`. Gitea ignores .github/workflows while .gitea/workflows exists, so the GitHub Pages workflow keeps running only on GitHub. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-26 10:07:54 +03:30
parent 47b2b72ea9
commit 22aa11bf32
2 changed files with 118 additions and 0 deletions
@@ -0,0 +1,93 @@
+# Gitea Actions. While .gitea/workflows exists Gitea ignores .github/workflows (GitHub Pages only).
+#
+# Every push and pull request: install, test and build.
+# Push to main: then deploy to the server over SSH and start it with docker compose.
+#
+# Repository settings → Actions → Secrets:
+#   DEPLOY_HOST          server address (deploy is skipped while this is empty)
+#   DEPLOY_SSH_KEY       private key whose public key is in the server user's ~/.ssh/authorized_keys
+#   DEPLOY_USER          SSH user, default root; it must be able to run docker
+#   DEPLOY_PORT          SSH port, default 22
+#   DEPLOY_KNOWN_HOSTS   optional output of `ssh-keyscan <host>`; otherwise the host key is scanned on each run
+# Repository settings → Actions → Variables (optional):
+#   DEPLOY_PATH          directory on the server, default vending-machine-game (in the user's home)
+#   SITE_ADDRESS         domains served with HTTPS, default "robotmarkets.ir, www.robotmarkets.ir"
+#   HEALTH_URL           URL checked after deploy, e.g. https://robotmarkets.ir/
+name: CI/CD
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+# Deploys run one at a time, in push order.
+concurrency:
+  group: ci-cd-${{ github.ref }}
+  cancel-in-progress: false
+
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    container:
+      image: node:22-bookworm
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install
+        run: npm ci --no-audit --no-fund
+      - name: Test
+        run: node --test tests/*.test.js
+      - name: Build
+        run: npm run build
+
+  deploy:
+    needs: test
+    if: github.event_name != 'pull_request' && github.ref == 'refs/heads/main'
+    runs-on: ubuntu-latest
+    container:
+      image: node:22-bookworm
+    env:
+      DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
+      DEPLOY_USER: ${{ secrets.DEPLOY_USER }}
+      DEPLOY_PORT: ${{ secrets.DEPLOY_PORT }}
+      DEPLOY_SSH_KEY: ${{ secrets.DEPLOY_SSH_KEY }}
+      DEPLOY_KNOWN_HOSTS: ${{ secrets.DEPLOY_KNOWN_HOSTS }}
+      DEPLOY_PATH: ${{ vars.DEPLOY_PATH }}
+      SITE_ADDRESS: ${{ vars.SITE_ADDRESS }}
+      HEALTH_URL: ${{ vars.HEALTH_URL }}
+    steps:
+      - uses: actions/checkout@v4
+      - name: Deploy to the server
+        run: |
+          if [ -z "$DEPLOY_HOST" ] || [ -z "$DEPLOY_SSH_KEY" ]; then
+            echo "DEPLOY_HOST / DEPLOY_SSH_KEY secrets are not set: skipping deploy."
+            exit 0
+          fi
+          port="${DEPLOY_PORT:-22}"
+          target="${DEPLOY_USER:-root}@${DEPLOY_HOST}"
+          dir="${DEPLOY_PATH:-vending-machine-game}"
+          site="${SITE_ADDRESS:-robotmarkets.ir, www.robotmarkets.ir}"
+          mkdir -p ~/.ssh && chmod 700 ~/.ssh
+          printf '%s\n' "$DEPLOY_SSH_KEY" > ~/.ssh/deploy_key && chmod 600 ~/.ssh/deploy_key
+          if [ -n "$DEPLOY_KNOWN_HOSTS" ]; then
+            printf '%s\n' "$DEPLOY_KNOWN_HOSTS" > ~/.ssh/known_hosts
+          else
+            ssh-keyscan -p "$port" "$DEPLOY_HOST" > ~/.ssh/known_hosts 2>/dev/null
+          fi
+          # Ship the checked-out sources (no git history) and rebuild/restart the container there.
+          tar czf - --exclude=./.git --exclude=./node_modules --exclude=./dist . \
+            | ssh -i ~/.ssh/deploy_key -p "$port" "$target" \
+              "mkdir -p '$dir' && tar xzf - -C '$dir' && cd '$dir' && SITE_ADDRESS='$site' docker compose up -d --build --remove-orphans && docker image prune -f"
+
+      - name: Check the site
+        if: env.HEALTH_URL != '' && env.DEPLOY_HOST != ''
+        run: |
+          for attempt in $(seq 1 20); do
+            if curl -fsS -o /dev/null "$HEALTH_URL"; then
+              echo "Site is up: $HEALTH_URL"
+              exit 0
+            fi
+            sleep 6
+          done
+          echo "Site did not answer at $HEALTH_URL" >&2
+          exit 1