Git Deploys

Secrets: SSH_HOST, SSH_USER, SSH_KEY
Variables: DEPLOY_PATH, APP_DOMAIN, GHCR_IMAGE

name: Deploy

on:
  push:
    branches: [main]

concurrency:
  group: production
  cancel-in-progress: false

jobs:
  deploy:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4
      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - uses: docker/build-push-action@v6
        with:
          context: .
          file: infra/Dockerfile
          push: true
          tags: ${{ vars.GHCR_IMAGE }}:${{ github.sha }}
      - name: Deploy over SSH
        uses: appleboy/[email protected]
        with:
          host: ${{ secrets.SSH_HOST }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_KEY }}
          script: |
            cd ${{ vars.DEPLOY_PATH }}
            docker compose pull
            docker compose up -d
      - name: Health check
        run: curl --fail --retry 10 --retry-delay 3 https://${{ vars.APP_DOMAIN }}/api/health

# Example on the VPS after selecting a known-good SHA
export IMAGE_TAG=known-good-commit-sha
docker compose pull
docker compose up -d
curl --fail https://chat.example.com/api/health