Initial commit: self-hosted SFP server deployment repository

Provides GitHub Actions workflows for customers to initialize, update, and monitor their self-hosted SFP Pro server instances. Includes a composite action for CLI installation from Gitea and SSH setup. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-14 11:08:06 +10:00
commit 718cb1c4e1
8 changed files with 861 additions and 0 deletions
@@ -0,0 +1,131 @@
+name: Initialize SFP Server
+
+on:
+  workflow_dispatch:
+    inputs:
+      force:
+        description: 'Force re-initialization (destroys existing data)'
+        type: boolean
+        default: false
+      tls_mode:
+        description: 'TLS certificate mode'
+        type: choice
+        options:
+          - 'custom'
+          - 'letsencrypt'
+        default: 'custom'
+
+jobs:
+  init:
+    name: 'Initialize server'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Validate required variables
+        run: |
+          MISSING=""
+          [ -z "${{ vars.SSH_HOST }}" ] && MISSING="$MISSING SSH_HOST"
+          [ -z "${{ vars.TENANT_NAME }}" ] && MISSING="$MISSING TENANT_NAME"
+          [ -z "${{ vars.DOMAIN }}" ] && MISSING="$MISSING DOMAIN"
+          [ -z "${{ vars.DOCKER_REGISTRY }}" ] && MISSING="$MISSING DOCKER_REGISTRY"
+
+          if [ -n "$MISSING" ]; then
+            echo "Missing required GitHub Variables:$MISSING"
+            echo ""
+            echo "Configure these in: Settings > Secrets and variables > Actions > Variables"
+            exit 1
+          fi
+
+      - name: Setup SFP CLI and SSH
+        uses: ./.github/actions/setup-sfp
+        with:
+          gitea-token: ${{ secrets.GITEA_TOKEN }}
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+          ssh-host: ${{ vars.SSH_HOST }}
+          cli-version: ${{ vars.SFP_CLI_VERSION || 'latest' }}
+
+      - name: Initialize server
+        env:
+          DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
+          DOCKER_REGISTRY_TOKEN: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
+          ORIGIN_CERT: ${{ secrets.ORIGIN_CERT }}
+          ORIGIN_KEY: ${{ secrets.ORIGIN_KEY }}
+        run: |
+          TENANT="${{ vars.TENANT_NAME }}"
+          DOMAIN="${{ vars.DOMAIN }}"
+          SSH_USER="${{ vars.SSH_USER || 'root' }}"
+          SSH_HOST="${{ vars.SSH_HOST }}"
+          TLS_MODE="${{ inputs.tls_mode }}"
+          WORKERS="${{ vars.WORKERS || '1' }}"
+          BASE_DIR="${{ vars.BASE_DIR || './sfp-server' }}"
+
+          echo "Initializing SFP Server"
+          echo "  Tenant:   $TENANT"
+          echo "  Domain:   $DOMAIN"
+          echo "  Host:     $SSH_HOST"
+          echo "  TLS Mode: $TLS_MODE"
+          echo "  Workers:  $WORKERS"
+          echo "  Registry: $DOCKER_REGISTRY"
+
+          # Build the init command
+          INIT_CMD="sfp server init"
+          INIT_CMD="$INIT_CMD --tenant \"$TENANT\""
+          INIT_CMD="$INIT_CMD --mode prod"
+          INIT_CMD="$INIT_CMD --domain \"$DOMAIN\""
+          INIT_CMD="$INIT_CMD --tls-mode \"$TLS_MODE\""
+          INIT_CMD="$INIT_CMD --workers $WORKERS"
+          INIT_CMD="$INIT_CMD --base-dir \"$BASE_DIR\""
+          INIT_CMD="$INIT_CMD --supabase-mode self-hosted"
+          INIT_CMD="$INIT_CMD --secrets-provider custom"
+          INIT_CMD="$INIT_CMD --no-interactive"
+          INIT_CMD="$INIT_CMD --ssh-connection \"$SSH_USER@$SSH_HOST\""
+          INIT_CMD="$INIT_CMD --identity-file ~/.ssh/deploy_key"
+
+          # Add image override if IMAGE_FQDN is configured
+          IMAGE_FQDN="${{ vars.IMAGE_FQDN }}"
+          IMAGE_TAG="${{ vars.IMAGE_TAG || 'latest' }}"
+          if [ -n "$IMAGE_FQDN" ]; then
+            INIT_CMD="$INIT_CMD --image \"${IMAGE_FQDN}:${IMAGE_TAG}\""
+          fi
+
+          # Add force flag if requested
+          if [ "${{ inputs.force }}" = "true" ]; then
+            INIT_CMD="$INIT_CMD --force"
+          fi
+
+          eval "$INIT_CMD"
+
+      - name: Output init results
+        if: always()
+        run: |
+          TENANT="${{ vars.TENANT_NAME }}"
+          RESULT_FILE="sfp-server-init-${TENANT}.json"
+
+          echo "## SFP Server Initialization" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+
+          if [ -f "$RESULT_FILE" ]; then
+            echo "### Results" >> $GITHUB_STEP_SUMMARY
+            echo '```json' >> $GITHUB_STEP_SUMMARY
+            cat "$RESULT_FILE" | jq '.' >> $GITHUB_STEP_SUMMARY
+            echo '```' >> $GITHUB_STEP_SUMMARY
+          fi
+
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Configuration" >> $GITHUB_STEP_SUMMARY
+          echo "| Setting | Value |" >> $GITHUB_STEP_SUMMARY
+          echo "|---------|-------|" >> $GITHUB_STEP_SUMMARY
+          echo "| Tenant | $TENANT |" >> $GITHUB_STEP_SUMMARY
+          echo "| Domain | ${{ vars.DOMAIN }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Host | ${{ vars.SSH_HOST }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| TLS Mode | ${{ inputs.tls_mode }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Registry | ${{ vars.DOCKER_REGISTRY }} |" >> $GITHUB_STEP_SUMMARY
+
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "### Next Steps" >> $GITHUB_STEP_SUMMARY
+          echo "1. Verify the server is accessible at \`https://${{ vars.DOMAIN }}\`" >> $GITHUB_STEP_SUMMARY
+          echo "2. Configure integrations (GitHub OAuth, GitHub App, Slack) via the integration API or by editing \`.env\` on the server" >> $GITHUB_STEP_SUMMARY
+          echo "3. Use the **Update SFP Server** workflow for future updates" >> $GITHUB_STEP_SUMMARY