|
1 | | -name: Deploy |
| 1 | +name: Build, Test and Deploy Discord Bot to VPS |
2 | 2 |
|
3 | 3 | on: |
4 | | - workflow_dispatch: # Manual trigger only |
5 | | - # Uncomment below when VPS is ready: |
6 | 4 | # push: |
7 | 5 | # branches: [ "main" ] |
8 | | - # paths-ignore: |
9 | | - # - 'docs/**' |
10 | | - # - '.gitignore' |
11 | | - # - 'LICENSE' |
| 6 | + workflow_dispatch: # Allow manual deployment |
12 | 7 |
|
13 | 8 | concurrency: |
14 | 9 | group: ${{ github.workflow }}-${{ github.ref }} |
15 | | - cancel-in-progress: false |
| 10 | + cancel-in-progress: true |
16 | 11 |
|
17 | 12 | jobs: |
18 | | - build-test-and-deploy: |
| 13 | + test-and-deploy: |
19 | 14 | runs-on: ubuntu-latest |
| 15 | + |
20 | 16 | steps: |
21 | | - - name: Checkout |
22 | | - uses: actions/checkout@v4 |
23 | | - |
24 | | - - name: Setup Node.js |
25 | | - uses: actions/setup-node@v4 |
26 | | - with: |
27 | | - node-version-file: .nvmrc |
28 | | - |
29 | | - - name: Install dependencies |
30 | | - run: | |
31 | | - if [ -f package-lock.json ]; then |
32 | | - npm ci --no-audit --no-fund |
33 | | - else |
34 | | - npm install --no-audit --no-fund |
35 | | - fi |
| 17 | + - name: Checkout code |
| 18 | + uses: actions/checkout@v4 |
36 | 19 |
|
37 | | - - name: Lint |
38 | | - run: npm run lint |
| 20 | + - name: Setup Node.js |
| 21 | + uses: actions/setup-node@v4 |
| 22 | + with: |
| 23 | + node-version-file: .nvmrc |
39 | 24 |
|
40 | | - - name: Build |
41 | | - run: npm run build:ci |
42 | | - env: |
43 | | - DISCORD_TOKEN: ${{ secrets.DISCORD_TOKEN }} |
44 | | - CLIENT_ID: ${{ secrets.CLIENT_ID }} |
| 25 | + - name: Setup pnpm |
| 26 | + uses: pnpm/action-setup@v4 |
45 | 27 |
|
46 | | - - name: Run tests |
47 | | - run: npm test |
| 28 | + - name: Install dependencies |
| 29 | + run: pnpm install --frozen-lockfile |
48 | 30 |
|
49 | | - - name: Package artifact |
50 | | - run: | |
51 | | - tar -czf release.tar.gz dist package.json package-lock.json .nvmrc || tar -czf release.tar.gz dist package.json .nvmrc |
| 31 | + - name: Lint |
| 32 | + run: pnpm lint |
52 | 33 |
|
53 | | - - name: Create .env file from secrets |
54 | | - env: |
55 | | - DISCORD_TOKEN: ${{ secrets.DISCORD_TOKEN }} |
56 | | - APPLICATION_ID: ${{ secrets.APPLICATION_ID }} |
57 | | - run: | |
| 34 | + - name: Type check |
| 35 | + run: pnpm typecheck |
| 36 | + |
| 37 | + - name: Build |
| 38 | + run: pnpm build:ci |
| 39 | + |
| 40 | + - name: Deploy to VPS |
| 41 | + uses: appleboy/ssh-action@v1.0.3 |
| 42 | + with: |
| 43 | + host: ${{ secrets.VPS_HOST }} |
| 44 | + username: ${{ secrets.VPS_USER }} |
| 45 | + key: ${{ secrets.VPS_SSH_KEY }} |
| 46 | + timeout: 30m |
| 47 | + script: | |
58 | 48 | set -euo pipefail |
59 | | - printf "DISCORD_TOKEN=%s\n" "$DISCORD_TOKEN" > .env |
60 | | - printf "APPLICATION_ID=%s\n" "$APPLICATION_ID" >> .env |
61 | | - printf "NODE_ENV=production\n" >> .env |
62 | | -
|
63 | | - - name: Copy artifact to VPS |
64 | | - env: |
65 | | - SSH_HOST: ${{ secrets.SSH_HOST }} |
66 | | - SSH_USER: ${{ secrets.SSH_USER }} |
67 | | - SSH_PORT: ${{ secrets.SSH_PORT }} |
68 | | - SSH_KEY: ${{ secrets.SSH_KEY }} |
69 | | - run: | |
70 | | - mkdir -p ~/.ssh |
71 | | - echo "$SSH_KEY" > ~/.ssh/id_ed25519 |
72 | | - chmod 600 ~/.ssh/id_ed25519 |
73 | | - ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 -p ${SSH_PORT:-22} $SSH_USER@$SSH_HOST "mkdir -p ~/apps/webdev-bot/releases" |
74 | | - scp -i ~/.ssh/id_ed25519 -P ${SSH_PORT:-22} -o StrictHostKeyChecking=no release.tar.gz $SSH_USER@$SSH_HOST:~/apps/webdev-bot/releases/release.tar.gz |
75 | | -
|
76 | | - - name: Upload .env to VPS |
77 | | - env: |
78 | | - SSH_HOST: ${{ secrets.SSH_HOST }} |
79 | | - SSH_USER: ${{ secrets.SSH_USER }} |
80 | | - SSH_PORT: ${{ secrets.SSH_PORT }} |
81 | | - SSH_KEY: ${{ secrets.SSH_KEY }} |
82 | | - APP_DIR: ${{ secrets.APP_DIR }} |
83 | | - run: | |
84 | | - mkdir -p ~/.ssh |
85 | | - echo "$SSH_KEY" > ~/.ssh/id_ed25519 |
86 | | - chmod 600 ~/.ssh/id_ed25519 |
87 | | - ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 -p ${SSH_PORT:-22} $SSH_USER@$SSH_HOST "mkdir -p ${APP_DIR:-\"~/apps/webdev-bot\"}/shared && chmod 700 ${APP_DIR:-\"~/apps/webdev-bot\"}/shared" |
88 | | - scp -i ~/.ssh/id_ed25519 -P ${SSH_PORT:-22} -o StrictHostKeyChecking=no .env $SSH_USER@$SSH_HOST:${APP_DIR:-"~/apps/webdev-bot"}/shared/.env |
89 | | - ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 -p ${SSH_PORT:-22} $SSH_USER@$SSH_HOST "chmod 600 ${APP_DIR:-\"~/apps/webdev-bot\"}/shared/.env" |
90 | | -
|
91 | | - - name: Deploy on VPS |
92 | | - env: |
93 | | - SSH_HOST: ${{ secrets.SSH_HOST }} |
94 | | - SSH_USER: ${{ secrets.SSH_USER }} |
95 | | - SSH_PORT: ${{ secrets.SSH_PORT }} |
96 | | - SSH_KEY: ${{ secrets.SSH_KEY }} |
97 | | - APP_DIR: ${{ secrets.APP_DIR }} |
98 | | - run: | |
99 | | - mkdir -p ~/.ssh |
100 | | - echo "$SSH_KEY" > ~/.ssh/id_ed25519 |
101 | | - chmod 600 ~/.ssh/id_ed25519 |
102 | | - ssh -o StrictHostKeyChecking=no -i ~/.ssh/id_ed25519 -p ${SSH_PORT:-22} $SSH_USER@$SSH_HOST << 'EOF' |
103 | | - set -euo pipefail |
104 | | - APP_DIR=${APP_DIR:-"~/apps/webdev-bot"} |
105 | | - mkdir -p "$APP_DIR/current" "$APP_DIR/releases" "$APP_DIR/shared" |
106 | | - cd "$APP_DIR" |
107 | | - rm -rf current/* |
108 | | - tar -xzf releases/release.tar.gz -C current |
109 | | - cd current |
110 | | - # Load env from shared/.env for the PM2 process |
111 | | - set -a |
112 | | - if [ -f "$APP_DIR/shared/.env" ]; then . "$APP_DIR/shared/.env"; fi |
113 | | - set +a |
114 | | - if [ -f package-lock.json ]; then |
115 | | - npm ci --omit=dev --no-audit --no-fund || true |
116 | | - else |
117 | | - npm install --omit=dev --no-audit --no-fund || true |
118 | | - fi |
119 | | - pm2 describe webdev-bot >/dev/null 2>&1 && pm2 restart webdev-bot || pm2 start "node dist/index.js" --name webdev-bot |
120 | | - pm2 save || true |
| 49 | +
|
| 50 | + echo "🚀 Starting deployment..." |
| 51 | +
|
| 52 | + # Create project directory if it doesn't exist |
| 53 | + PROJECT_DIR="/home/${{ secrets.VPS_USER }}/moderation-tool-bot" |
| 54 | + if [ ! -d "$PROJECT_DIR" ]; then |
| 55 | + echo "📁 Creating project directory..." |
| 56 | + mkdir -p "$PROJECT_DIR" |
| 57 | + fi |
| 58 | +
|
| 59 | + # Navigate to project directory |
| 60 | + cd "$PROJECT_DIR" |
| 61 | +
|
| 62 | + # Check if this is a git repository |
| 63 | + if [ ! -d ".git" ]; then |
| 64 | + echo "📦 Cloning repository..." |
| 65 | + # Clone the repository if not already cloned |
| 66 | + git clone https://github.com/r-webdev/moderation-tool.git . |
| 67 | + git checkout main |
| 68 | + fi |
| 69 | +
|
| 70 | +
|
| 71 | + echo "🔄 Pulling latest changes..." |
| 72 | + # Pull latest changes |
| 73 | + git checkout main |
| 74 | + git pull origin main --no-edit |
| 75 | +
|
| 76 | + echo "⚙️ Setting up environment..." |
| 77 | + # Read Node version from .nvmrc |
| 78 | + NODE_VERSION=$(cat .nvmrc | sed 's/v//') |
| 79 | + echo "Using Node version: $NODE_VERSION" |
| 80 | +
|
| 81 | + # Create .env.local file with secrets |
| 82 | + cat > .env.local << EOF |
| 83 | + DISCORD_TOKEN=${{ secrets.DISCORD_TOKEN }} |
| 84 | + CLIENT_ID=${{ secrets.CLIENT_ID }} |
| 85 | + SERVER_ID=${{ secrets.SERVER_ID }} |
121 | 86 | EOF |
122 | 87 |
|
| 88 | + echo "🐳 Stopping existing containers..." |
| 89 | + # Stop any existing containers (ignore errors if none running) |
| 90 | + docker compose down --remove-orphans || true |
| 91 | +
|
| 92 | + echo "🏗️ Building and starting production container..." |
| 93 | + # Build and start production container |
| 94 | + docker compose --profile prod up -d --build --force-recreate |
| 95 | +
|
| 96 | + echo "⏳ Waiting for container to be healthy..." |
| 97 | + # Wait a bit for the container to start |
| 98 | + sleep 10 |
| 99 | +
|
| 100 | + echo "🔍 Checking deployment status..." |
| 101 | + # Check container status |
| 102 | + if docker compose ps | grep -q "Up"; then |
| 103 | + echo "✅ Deployment successful!" |
| 104 | + else |
| 105 | + echo "❌ Deployment failed!" |
| 106 | + exit 1 |
| 107 | + fi |
| 108 | +
|
| 109 | + echo "🎉 Deployment completed successfully!" |
| 110 | +
|
0 commit comments