Migrate HickLab3D dashboard and add production auto deployment
Deploy HickLab3D Dashboard / Deploy to production (push) Failing after 19s
Deploy HickLab3D Dashboard / Deploy to production (push) Failing after 19s
This commit is contained in:
Hickmeister
@@ -0,0 +1,355 @@
|
||||
name: Deploy HickLab3D Dashboard
|
||||
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- main
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
env:
|
||||
PROJECT_NAME: TechOdyssey_Designs_Dashboard
|
||||
DEPLOY_ROOT: /mnt/www-live
|
||||
NODE_VERSION: "22.21.1"
|
||||
REQUIRED_PHP_VERSION: "8.4.0"
|
||||
PHP_CMD: /opt/lhits-toolchain/bin/php
|
||||
COMPOSER_CMD: /opt/lhits-toolchain/bin/composer
|
||||
|
||||
jobs:
|
||||
deploy-production:
|
||||
name: Deploy to production
|
||||
runs-on: [swarm, linux, arm64]
|
||||
if: github.ref == 'refs/heads/main'
|
||||
|
||||
steps:
|
||||
- name: Install PHP, Composer, Node and deployment tools
|
||||
run: |
|
||||
if command -v apt-get >/dev/null 2>&1; then
|
||||
apt-get update
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install -y \
|
||||
ca-certificates curl gnupg lsb-release software-properties-common \
|
||||
unzip git rsync xz-utils
|
||||
|
||||
. /etc/os-release
|
||||
if [ "${ID:-}" = "ubuntu" ]; then
|
||||
add-apt-repository -y ppa:ondrej/php
|
||||
else
|
||||
curl -fsSL https://packages.sury.org/php/apt.gpg | gpg --dearmor --yes -o /usr/share/keyrings/deb.sury.org-php.gpg
|
||||
echo "deb [signed-by=/usr/share/keyrings/deb.sury.org-php.gpg] https://packages.sury.org/php/ ${VERSION_CODENAME} main" > /etc/apt/sources.list.d/php.list
|
||||
fi
|
||||
|
||||
apt-get update
|
||||
DEBIAN_FRONTEND=noninteractive apt-get install -y \
|
||||
php8.4-cli php8.4-mbstring php8.4-mysql php8.4-xml php8.4-curl \
|
||||
php8.4-zip php8.4-bcmath php8.4-sqlite3 composer
|
||||
|
||||
PHP_BIN="$(command -v php8.4)"
|
||||
elif command -v apk >/dev/null 2>&1; then
|
||||
apk update
|
||||
apk add --no-cache git rsync curl ca-certificates xz libgcc
|
||||
|
||||
printf '%s\n' \
|
||||
"https://dl-cdn.alpinelinux.org/alpine/edge/main" \
|
||||
"https://dl-cdn.alpinelinux.org/alpine/edge/community" \
|
||||
>> /etc/apk/repositories
|
||||
apk update
|
||||
apk add --no-cache \
|
||||
php84 php84-cli php84-mbstring php84-xml php84-curl php84-zip php84-phar php84-bcmath php84-ctype \
|
||||
php84-mysqli php84-pdo php84-pdo_mysql php84-pdo_sqlite php84-sqlite3 php84-openssl php84-fileinfo php84-iconv php84-session
|
||||
apk add --no-cache php84-dom php84-tokenizer php84-xmlwriter php84-session || true
|
||||
|
||||
missing=""
|
||||
for extension in dom iconv pdo_sqlite session sqlite3 tokenizer xmlwriter; do
|
||||
php84 -r "exit(extension_loaded('${extension}') ? 0 : 1);" || missing="${missing} ${extension}"
|
||||
done
|
||||
|
||||
if [ -n "$missing" ]; then
|
||||
apk add --no-cache php84-dom php84-iconv php84-pdo_sqlite php84-session php84-sqlite3 php84-tokenizer php84-xmlwriter || true
|
||||
fi
|
||||
|
||||
PHP_BIN="$(command -v php84)"
|
||||
curl -fsSL https://getcomposer.org/installer -o /tmp/composer-setup.php
|
||||
"$PHP_BIN" /tmp/composer-setup.php --install-dir=/usr/local/bin --filename=composer
|
||||
else
|
||||
echo "Unsupported package manager for installing PHP/Composer/Node" >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
if [ -z "${PHP_BIN:-}" ] || [ ! -x "$PHP_BIN" ]; then
|
||||
echo "PHP 8.4 binary was not installed or is not executable." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
COMPOSER_BIN="$(command -v composer)"
|
||||
mkdir -p /opt/lhits-toolchain/bin
|
||||
ln -sfn "$PHP_BIN" /opt/lhits-toolchain/bin/php
|
||||
printf '%s\n' '#!/bin/sh' "exec \"$PHP_BIN\" \"$COMPOSER_BIN\" \"\$@\"" > /opt/lhits-toolchain/bin/composer
|
||||
chmod +x /opt/lhits-toolchain/bin/composer
|
||||
"$PHP_CMD" -v
|
||||
|
||||
arch="$(uname -m)"
|
||||
case "$arch" in
|
||||
x86_64) node_arch="x64" ;;
|
||||
aarch64|arm64) node_arch="arm64" ;;
|
||||
*) echo "Unsupported Node architecture: $arch" >&2; exit 1 ;;
|
||||
esac
|
||||
|
||||
if [ -f /etc/alpine-release ] || ldd /bin/sh 2>&1 | grep -qi musl; then
|
||||
node_dir="node-v${NODE_VERSION}-linux-${node_arch}-musl"
|
||||
node_url="https://unofficial-builds.nodejs.org/download/release/v${NODE_VERSION}/${node_dir}.tar.xz"
|
||||
else
|
||||
node_dir="node-v${NODE_VERSION}-linux-${node_arch}"
|
||||
node_url="https://nodejs.org/dist/v${NODE_VERSION}/${node_dir}.tar.xz"
|
||||
fi
|
||||
|
||||
curl -fsSL "$node_url" -o /tmp/node.tar.xz
|
||||
tar -xJf /tmp/node.tar.xz -C /tmp
|
||||
rm -rf /usr/local/lib/nodejs
|
||||
mkdir -p /usr/local/lib/nodejs
|
||||
mv "/tmp/${node_dir}" /usr/local/lib/nodejs/node
|
||||
ln -sfn /usr/local/lib/nodejs/node/bin/node /usr/local/bin/node
|
||||
ln -sfn /usr/local/lib/nodejs/node/bin/npm /usr/local/bin/npm
|
||||
ln -sfn /usr/local/lib/nodejs/node/bin/npx /usr/local/bin/npx
|
||||
hash -r
|
||||
|
||||
- name: Verify runner toolchain
|
||||
run: |
|
||||
"$PHP_CMD" -v
|
||||
"$PHP_CMD" -r '
|
||||
$required = getenv("REQUIRED_PHP_VERSION");
|
||||
if (version_compare(PHP_VERSION, $required, "<")) {
|
||||
fwrite(STDERR, "PHP ".PHP_VERSION." is too old. Required: ".$required." or newer.\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
$extensions = ["bcmath", "ctype", "curl", "dom", "fileinfo", "iconv", "mbstring", "openssl", "pdo", "pdo_mysql", "pdo_sqlite", "session", "sqlite3", "tokenizer", "xml", "xmlwriter", "zip"];
|
||||
$missing = array_values(array_filter($extensions, fn ($extension) => ! extension_loaded($extension)));
|
||||
if ($missing !== []) {
|
||||
fwrite(STDERR, "Missing required PHP extensions: ".implode(", ", $missing)."\n");
|
||||
exit(1);
|
||||
}
|
||||
'
|
||||
|
||||
node -e "const [major, minor] = process.versions.node.split('.').map(Number); const ok = (major === 20 && minor >= 19) || (major === 22 && minor >= 12) || major > 22; if (!ok) { console.error('Node '+process.versions.node+' is not supported. Vite requires ^20.19.0 or >=22.12.0.'); process.exit(1); }"
|
||||
"$COMPOSER_CMD" --version
|
||||
npm --version
|
||||
|
||||
- name: Clone main
|
||||
env:
|
||||
GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
|
||||
REPOSITORY: ${{ github.repository }}
|
||||
run: |
|
||||
test -n "$GITEA_TOKEN"
|
||||
git config --global credential.helper '!f() { echo "username=oauth2"; echo "password=$GITEA_TOKEN"; }; f'
|
||||
git clone --depth 1 --single-branch --branch main "https://git.hickmeister.uk/${REPOSITORY}.git" src
|
||||
|
||||
- name: Install dependencies and verify app
|
||||
working-directory: src
|
||||
run: |
|
||||
"$COMPOSER_CMD" install --no-interaction --prefer-dist --no-progress
|
||||
npm ci
|
||||
cp .env.example .env
|
||||
"$PHP_CMD" artisan key:generate --ansi
|
||||
"$PHP_CMD" vendor/bin/phpunit
|
||||
npm run build
|
||||
test -f public/build/manifest.json
|
||||
ls -la public/build
|
||||
|
||||
- name: Check existing production environment
|
||||
env:
|
||||
DEPLOY_PATH: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
test -d "$DEPLOY_PATH"
|
||||
test -f "$DEPLOY_PATH/.env"
|
||||
test -f "$DEPLOY_PATH/.htaccess"
|
||||
grep -q '^APP_KEY=base64:' "$DEPLOY_PATH/.env"
|
||||
|
||||
- name: Deploy application to live directory
|
||||
env:
|
||||
DEPLOY_PATH: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
set +e
|
||||
rsync -rlz --delete --no-perms --no-owner --no-group --omit-dir-times --no-times --inplace \
|
||||
--exclude '.env' \
|
||||
--exclude '.htaccess' \
|
||||
--exclude '.git/' \
|
||||
--exclude '.gitea/' \
|
||||
--exclude 'node_modules/' \
|
||||
--exclude 'vendor/' \
|
||||
--exclude 'tests/' \
|
||||
--exclude '.phpunit.cache/' \
|
||||
--exclude '.phpunit.result.cache' \
|
||||
--exclude 'storage/' \
|
||||
--exclude 'bootstrap/cache/' \
|
||||
--exclude 'logs/' \
|
||||
--exclude 'public/storage' \
|
||||
src/ "$DEPLOY_PATH/"
|
||||
status=$?
|
||||
set -e
|
||||
if [ "$status" -ne 0 ]; then
|
||||
if [ "$status" -eq 23 ] || [ "$status" -eq 24 ]; then
|
||||
echo "rsync reported partial transfer (likely timestamps/attrs not permitted); continuing."
|
||||
else
|
||||
exit "$status"
|
||||
fi
|
||||
fi
|
||||
|
||||
- name: Prepare Laravel directories
|
||||
env:
|
||||
DEPLOY_PATH: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
RUNTIME_PATH: /tmp/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
mkdir -p \
|
||||
"$DEPLOY_PATH/storage/app/public" \
|
||||
"$DEPLOY_PATH/storage/framework/cache/data" \
|
||||
"$DEPLOY_PATH/storage/framework/sessions" \
|
||||
"$DEPLOY_PATH/storage/framework/testing" \
|
||||
"$DEPLOY_PATH/storage/framework/views" \
|
||||
"$DEPLOY_PATH/storage/logs" \
|
||||
"$DEPLOY_PATH/bootstrap/cache" \
|
||||
"$RUNTIME_PATH/views" \
|
||||
"$RUNTIME_PATH/logs" \
|
||||
"$RUNTIME_PATH/cache"
|
||||
|
||||
- name: Verify deployed Laravel files
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
for path in \
|
||||
artisan \
|
||||
public/index.php \
|
||||
public/build/manifest.json \
|
||||
routes/web.php \
|
||||
resources/views/dashboard.blade.php \
|
||||
app/Services/Etsy.php \
|
||||
app/Services/Bambuddy.php \
|
||||
app/Services/Parcel2Go.php \
|
||||
app/Services/DryerClient.php
|
||||
do
|
||||
if [ ! -f "$path" ]; then
|
||||
echo "Missing deployed Laravel file: $(pwd)/$path" >&2
|
||||
exit 1
|
||||
fi
|
||||
done
|
||||
|
||||
- name: Require Laravel environment file
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
if [ ! -f ".env" ]; then
|
||||
echo "Missing .env at $(pwd)/.env. Create the server-side Laravel environment file before deploying." >&2
|
||||
exit 1
|
||||
fi
|
||||
|
||||
- name: Ensure writable runtime paths
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
env:
|
||||
RUNTIME_PATH: /tmp/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
mkdir -p "$RUNTIME_PATH/views" "$RUNTIME_PATH/logs" "$RUNTIME_PATH/cache"
|
||||
chmod 0777 "$RUNTIME_PATH" "$RUNTIME_PATH/views" "$RUNTIME_PATH/logs" "$RUNTIME_PATH/cache"
|
||||
|
||||
if grep -q '^VIEW_COMPILED_PATH=' .env; then
|
||||
sed -i "s|^VIEW_COMPILED_PATH=.*|VIEW_COMPILED_PATH=/tmp/TechOdyssey_Designs_Dashboard.views|" .env
|
||||
else
|
||||
echo "VIEW_COMPILED_PATH=/tmp/TechOdyssey_Designs_Dashboard.views" >> .env
|
||||
fi
|
||||
|
||||
if grep -q '^LOG_PATH=' .env; then
|
||||
sed -i "s|^LOG_PATH=.*|LOG_PATH=/tmp/TechOdyssey_Designs_Dashboard.laravel.log|" .env
|
||||
else
|
||||
echo "LOG_PATH=/tmp/TechOdyssey_Designs_Dashboard.laravel.log" >> .env
|
||||
fi
|
||||
|
||||
for key_path in \
|
||||
"APP_SERVICES_CACHE=/tmp/TechOdyssey_Designs_Dashboard.services.php" \
|
||||
"APP_PACKAGES_CACHE=/tmp/TechOdyssey_Designs_Dashboard.packages.php" \
|
||||
"APP_CONFIG_CACHE=/tmp/TechOdyssey_Designs_Dashboard.config.php" \
|
||||
"APP_ROUTES_CACHE=/tmp/TechOdyssey_Designs_Dashboard.routes.php" \
|
||||
"APP_EVENTS_CACHE=/tmp/TechOdyssey_Designs_Dashboard.events.php"
|
||||
do
|
||||
key="${key_path%%=*}"
|
||||
value="${key_path#*=}"
|
||||
if grep -q "^${key}=" .env; then
|
||||
sed -i "s|^${key}=.*|${key}=${value}|" .env
|
||||
else
|
||||
echo "${key}=${value}" >> .env
|
||||
fi
|
||||
done
|
||||
|
||||
- name: Install production PHP dependencies
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
"$COMPOSER_CMD" install --no-dev --no-interaction --prefer-dist --optimize-autoloader
|
||||
|
||||
- name: Clear compiled Laravel files
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
rm -f bootstrap/cache/config.php bootstrap/cache/routes-*.php bootstrap/cache/events.php bootstrap/cache/packages.php bootstrap/cache/services.php
|
||||
"$PHP_CMD" artisan config:clear
|
||||
"$PHP_CMD" artisan route:clear
|
||||
"$PHP_CMD" artisan event:clear
|
||||
"$PHP_CMD" artisan view:clear
|
||||
|
||||
- name: Ensure application key exists
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
grep -q '^APP_KEY=base64:' .env
|
||||
|
||||
- name: Verify database target
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
"$PHP_CMD" <<'PHP'
|
||||
$env = [];
|
||||
foreach (file(".env", FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) as $line) {
|
||||
$line = trim($line);
|
||||
if ($line === "" || str_starts_with($line, "#") || ! str_contains($line, "=")) {
|
||||
continue;
|
||||
}
|
||||
[$key, $value] = explode("=", $line, 2);
|
||||
$env[$key] = trim($value, "\"'");
|
||||
}
|
||||
|
||||
$connection = $env["DB_CONNECTION"] ?? "";
|
||||
if (! in_array($connection, ["mysql", "mariadb"], true)) {
|
||||
fwrite(STDERR, "DB_CONNECTION must be mysql or mariadb for this deployment. Current value: ".$connection."\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
$host = $env["DB_HOST"] ?? "";
|
||||
$port = (int) ($env["DB_PORT"] ?? 3306);
|
||||
$database = $env["DB_DATABASE"] ?? "";
|
||||
if ($host === "") {
|
||||
fwrite(STDERR, "DB_HOST is missing from .env. Set DB_HOST to the MySQL server IP or hostname.\n");
|
||||
exit(1);
|
||||
}
|
||||
if ($database === "") {
|
||||
fwrite(STDERR, "DB_DATABASE is missing from .env.\n");
|
||||
exit(1);
|
||||
}
|
||||
|
||||
$socket = @fsockopen($host, $port, $errno, $errstr, 5);
|
||||
if (! $socket) {
|
||||
fwrite(STDERR, "Cannot reach MySQL at DB_HOST=".$host." DB_PORT=".$port.": ".$errstr." (".$errno.")\n");
|
||||
exit(1);
|
||||
}
|
||||
fclose($socket);
|
||||
echo "Database target reachable at DB_HOST=".$host." DB_PORT=".$port." DB_DATABASE=".$database."\n";
|
||||
PHP
|
||||
|
||||
- name: Run Laravel migrations
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
"$PHP_CMD" artisan migrate --force
|
||||
|
||||
- name: Optimise Laravel
|
||||
working-directory: ${{ env.DEPLOY_ROOT }}/${{ env.PROJECT_NAME }}
|
||||
run: |
|
||||
rm -f public/hot
|
||||
rm -rf build
|
||||
cp -a public/build build
|
||||
rm -rf public/storage
|
||||
ln -s ../storage/app/public public/storage
|
||||
"$PHP_CMD" artisan config:clear
|
||||
"$PHP_CMD" artisan route:clear
|
||||
"$PHP_CMD" artisan view:clear
|
||||
Reference in New Issue
Block a user