Trent/vigilcare-records
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update cd
CI / frontend (push) Canceled after 0s
Details
CI / backend (push) Canceled after 4s
Details

Browse Source
This commit is contained in:
Trent
2026-08-12 01:47:12 +08:00
parent 0c31291b69
commit 6e06717b82
1 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/cd.yml
+14 -6
View File
@@ -97,24 +97,32 @@ jobs:
# Runs while the previous release is still serving traffic, so every # Runs while the previous release is still serving traffic, so every
# migration must be backwards-compatible with the outgoing image # migration must be backwards-compatible with the outgoing image
# (expand-then-contract). # (expand-then-contract). Connection strings contain `;` / spaces
# ("SSL Mode=...") — never pass them as a bare ssh remote argv; the
# remote shell splits on `;` and drops the variable (set -u → unbound).
- name: Apply migrations - name: Apply migrations
env: env:
PG_CONNECTION_DDL: ${{ secrets.PG_CONNECTION_DDL }} PG_CONNECTION_DDL: ${{ secrets.PG_CONNECTION_DDL }}
run: | run: |
REMOTE="${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}"
scp -i ~/.ssh/id_ed25519 ./migrate-api \ scp -i ~/.ssh/id_ed25519 ./migrate-api \
"${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}:/tmp/vigilcare-records-migrate-api" "$REMOTE:/tmp/vigilcare-records-migrate-api"
ssh -i ~/.ssh/id_ed25519 \ umask 077
"${{ secrets.DEPLOY_USER }}@${{ secrets.DEPLOY_HOST }}" \ printf '%s\n' "$PG_CONNECTION_DDL" > /tmp/vigilcare-records-pg-ddl
PG_CONNECTION_DDL="$PG_CONNECTION_DDL" bash -euo pipefail <<'EOF' scp -i ~/.ssh/id_ed25519 /tmp/vigilcare-records-pg-ddl \
"$REMOTE:/tmp/vigilcare-records-pg-ddl"
rm -f /tmp/vigilcare-records-pg-ddl
ssh -i ~/.ssh/id_ed25519 "$REMOTE" bash -euo pipefail <<'EOF'
chmod +x /tmp/vigilcare-records-migrate-api chmod +x /tmp/vigilcare-records-migrate-api
chmod 600 /tmp/vigilcare-records-pg-ddl
PG_CONNECTION_DDL="$(cat /tmp/vigilcare-records-pg-ddl)"
docker run --rm \ docker run --rm \
--network shared-services \ --network shared-services \
-v /tmp/vigilcare-records-migrate-api:/migrate-api:ro \ -v /tmp/vigilcare-records-migrate-api:/migrate-api:ro \
--entrypoint /migrate-api \ --entrypoint /migrate-api \
mcr.microsoft.com/dotnet/runtime-deps:8.0 \ mcr.microsoft.com/dotnet/runtime-deps:8.0 \
--connection "$PG_CONNECTION_DDL" --connection "$PG_CONNECTION_DDL"
rm -f /tmp/vigilcare-records-migrate-api rm -f /tmp/vigilcare-records-migrate-api /tmp/vigilcare-records-pg-ddl
EOF EOF
deploy: deploy: