Sith/.github/workflows/deploy.yml

name: Deploy to production
concurrency: production

on:
  push:
    branches: [master]
  workflow_dispatch:

jobs:
  deployment:
    runs-on: ubuntu-latest
    environment: production
    timeout-minutes: 30
  
    steps:
    - name: SSH Remote Commands
      uses: appleboy/ssh-action@dce9d565de8d876c11d93fa4fe677c0285a66d78
      with:
        # Proxy
        proxy_host : ${{secrets.PROXY_HOST}}
        proxy_port : ${{secrets.PROXY_PORT}}
        proxy_username : ${{secrets.PROXY_USER}}
        proxy_passphrase: ${{secrets.PROXY_PASSPHRASE}}
        proxy_key: ${{secrets.PROXY_KEY}}
        
        # Serveur web
        host: ${{secrets.HOST}}
        port : ${{secrets.PORT}}
        username : ${{secrets.USER}}
        key: ${{secrets.KEY}}

        script_stop: true

        # See https://github.com/ae-utbm/sith3/wiki/GitHub-Actions#deployment-action
        script: |
          export PATH="/home/sith/.local/bin:$PATH"
          pushd ${{secrets.SITH_PATH}}

          git pull
          poetry install --with prod --without dev,docs,tests
          poetry run ./manage.py install_xapian
          poetry run ./manage.py migrate
          echo "yes" | poetry run ./manage.py collectstatic
          poetry run ./manage.py compilestatic
          poetry run ./manage.py compilemessages

          sudo systemctl restart uwsgi
  
  sentry:
    runs-on: ubuntu-latest
    environment: production
    timeout-minutes: 30
    needs: deployment
    steps:
      - uses: actions/checkout@v3

      - name: Sentry Release
        uses: getsentry/action-release@v1.2.0
        env:
          SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }}
          SENTRY_ORG: ${{ secrets.SENTRY_ORG }}
          SENTRY_PROJECT: ${{ secrets.SENTRY_PROJECT }}
          SENTRY_URL: ${{ secrets.SENTRY_URL }}
        with:
          environment: production