.gitea/workflows/deploy.yaml

@@ -17,39 +17,44 @@ jobs:
           echo "Clean ref name: $CLEAN_REF_NAME"
           echo "CLEAN_REF_NAME=$CLEAN_REF_NAME" >> $GITEA_ENV
 
-      - name: ✏️ Rename local docker-compose file
+      - name: ⚙️ Configure SSH Client
         run: |
-          mv docker-compose.yml "docker-compose-${{ env.CLEAN_REF_NAME }}.yml"
+          sudo apt-get update && sudo apt-get install -y sshpass
+          mkdir -p ~/.ssh
+          ssh-keyscan -p 22 "${{ secrets.SSH_HOST }}" >> ~/.ssh/known_hosts
 
-      - name: 🚚 Copy docker-compose file to remote server
+      - name: 🏗️ Create docker-compose file
-        uses: appleboy/scp-action@v0.1.7
+        env:
-        with:
+          SSHPASS: ${{ secrets.SSH_PASSWORD }}
-          host: ${{ secrets.SSH_HOST }}
+          SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
-          username: ${{ secrets.SSH_USERNAME }}
+          SSH_HOST: ${{ secrets.SSH_HOST }}
-          password: ${{ secrets.SSH_PASSWORD }}
+          DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
-          port: 22
+          REF_NAME: ${{ env.CLEAN_REF_NAME }}
-          source: "docker-compose-${{ env.CLEAN_REF_NAME }}.yml"
+        run: |
-          target: ${{ secrets.DEPLOY_DIRECTORY }}
+          sshpass -e ssh -p 22 "$SSH_USERNAME@$SSH_HOST" \
-          strip_components: 0
+            "mkdir -p \"$DEPLOY_DIRECTORY\" && \
-          tar_tmp_path: /tmp
+             cat > \"$DEPLOY_DIRECTORY/docker-compose-$REF_NAME.yml\"" \
+            < docker-compose.yml
 
       - name: 🔐 Create secrets
-        uses: appleboy/ssh-action@v1.0.3
         env:
+          SSHPASS: ${{ secrets.SSH_PASSWORD }}
+          SSH_USERNAME: ${{ secrets.SSH_USERNAME }}
+          SSH_HOST: ${{ secrets.SSH_HOST }}
           DEPLOY_DIRECTORY: ${{ secrets.DEPLOY_DIRECTORY }}
           BESZEL_AGENT_KEY: ${{ secrets.BESZEL_AGENT_KEY }}
           BESZEL_AGENT_TOKEN: ${{ secrets.BESZEL_AGENT_TOKEN }}
           GITEA_RUNNER_REGISTRATION_TOKEN: ${{ secrets._GITEA_RUNNER_REGISTRATION_TOKEN }}
           VAULTWARDEN_ADMIN_TOKEN: ${{ secrets.VAULTWARDEN_ADMIN_TOKEN }}
-        with:
+        run: |
-          host: ${{ secrets.SSH_HOST }}
+          sshpass -e ssh -p 22 "$SSH_USERNAME@$SSH_HOST" env \
-          username: ${{ secrets.SSH_USERNAME }}
+            DEPLOY_DIRECTORY="$DEPLOY_DIRECTORY" \
-          password: ${{ secrets.SSH_PASSWORD }}
+            BESZEL_AGENT_KEY="$BESZEL_AGENT_KEY" \
-          port: 22
+            BESZEL_AGENT_TOKEN="$BESZEL_AGENT_TOKEN" \
-          envs: DEPLOY_DIRECTORY,BESZEL_AGENT_KEY,BESZEL_AGENT_TOKEN,GITEA_RUNNER_REGISTRATION_TOKEN,VAULTWARDEN_ADMIN_TOKEN
+            GITEA_RUNNER_REGISTRATION_TOKEN="$GITEA_RUNNER_REGISTRATION_TOKEN" \
-          script: |
+            VAULTWARDEN_ADMIN_TOKEN="$VAULTWARDEN_ADMIN_TOKEN" \
-            set -e # Stop on error
+            bash -s << 'EOT'
-
+            set -e
             cd "$DEPLOY_DIRECTORY"
             
             mkdir -p secrets
@@ -57,3 +62,4 @@ jobs:
             echo "$BESZEL_AGENT_TOKEN" > secrets/beszel_agent_token.txt
             echo "$GITEA_RUNNER_REGISTRATION_TOKEN" > secrets/gitea_runner_registration_token.txt
             echo "$VAULTWARDEN_ADMIN_TOKEN" > secrets/vaultwarden_admin_token.txt
+          EOT