iframe-proxy | Sunbelt Computer Software

66 lines (61 loc) · 2.32 KB

# SPDX-FileCopyrightText: 2026 William Jin <AuraMindNest@outlook.com>
# SPDX-License-Identifier: BSL-1.0
# workflow_run grants an elevated GITHUB_TOKEN by default. Mitigations:
#   - permissions: contents: read (no write access)
#   - job-level 'if' requires conclusion == 'success' AND event == 'push'
#     (ignores PRs, forks, and failed/cancelled runs)
#   - head_branch limited to main or develop
  workflow_run:
    workflows: [CI]
    branches: [main, develop]
    types: [completed]
permissions:
  contents: read
concurrency:
  group: deploy-${{ github.event.workflow_run.head_branch }}
  cancel-in-progress: false
      github.event.workflow_run.conclusion == 'success'
      && github.event.workflow_run.event == 'push'
      && (github.event.workflow_run.head_branch == 'main'
          || github.event.workflow_run.head_branch == 'develop')
    runs-on: ubuntu-latest
    timeout-minutes: 20
    environment: >-
      ${{ github.event.workflow_run.head_branch == 'main' && 'production'
          || 'staging' }}
    - name: Deploy via SSH
      uses: appleboy/ssh-action@0ff4204d59e8e51228ff73bce53f80d53301dee2
        BRANCH: ${{ github.event.workflow_run.head_branch }}
        WEBLATE_PORT: ${{ secrets.WEBLATE_PORT }}
        WEBLATE_URL_PREFIX: ${{ secrets.WEBLATE_URL_PREFIX }}
      with:
        host: ${{ secrets.SSH_HOST }}
        username: ${{ secrets.SSH_USER }}
        key: ${{ secrets.SSH_PRIVATE_KEY }}
        port: ${{ secrets.SSH_PORT || '22' }}
        envs: BRANCH,WEBLATE_PORT,WEBLATE_URL_PREFIX
        script: |
          set -euo pipefail
          cd /opt/cppa-weblate-plugin
          git fetch origin "$BRANCH"
          git checkout "$BRANCH"
          git pull origin "$BRANCH"
          docker compose -f docker/docker-compose.cd.yml --env-file .env build
          docker compose -f docker/docker-compose.cd.yml --env-file .env up -d
          WEBLATE_PORT="${WEBLATE_PORT:-8080}"
          WEBLATE_URL_PREFIX="${WEBLATE_URL_PREFIX:-}"
          for i in $(seq 1 36); do
            curl -sf "http://127.0.0.1:${WEBLATE_PORT}${WEBLATE_URL_PREFIX}/healthz/" && exit 0
            sleep 5
          done
          echo "Weblate not healthy after 180s"
          docker compose -f docker/docker-compose.cd.yml --env-file .env logs weblate | tail -40
          exit 1

Sunbelt Computer Software

PL/B Language Development and Support

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Sunbelt Computer Software

PL/B Language Development and Support

Uh oh!

FilesExpand file tree

cd.yml

Latest commit

History

cd.yml

File metadata and controls