Initial commit: self-hosted SFP server deployment repository

Provides GitHub Actions workflows for customers to initialize, update, and monitor their self-hosted SFP Pro server instances. Includes a composite action for CLI installation from Gitea and SSH setup. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-14 11:08:06 +10:00
commit 718cb1c4e1
8 changed files with 861 additions and 0 deletions
@@ -0,0 +1,114 @@
+name: Update SFP Server
+
+on:
+  workflow_dispatch:
+    inputs:
+      docker_tag:
+        description: 'Docker image tag to deploy (leave empty to use IMAGE_TAG variable or "latest")'
+        required: false
+        default: ''
+      skip_drain:
+        description: 'Skip waiting for active workflows to complete'
+        type: boolean
+        default: false
+      drain_timeout:
+        description: 'Max seconds to wait for active workflows to complete'
+        required: false
+        default: '3600'
+      skip_backup:
+        description: 'Skip backup of current configuration before update'
+        type: boolean
+        default: false
+
+jobs:
+  update:
+    name: 'Update server'
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Validate required variables
+        run: |
+          MISSING=""
+          [ -z "${{ vars.SSH_HOST }}" ] && MISSING="$MISSING SSH_HOST"
+          [ -z "${{ vars.TENANT_NAME }}" ] && MISSING="$MISSING TENANT_NAME"
+          [ -z "${{ vars.DOCKER_REGISTRY }}" ] && MISSING="$MISSING DOCKER_REGISTRY"
+
+          if [ -n "$MISSING" ]; then
+            echo "Missing required GitHub Variables:$MISSING"
+            echo ""
+            echo "Configure these in: Settings > Secrets and variables > Actions > Variables"
+            exit 1
+          fi
+
+      - name: Setup SFP CLI and SSH
+        uses: ./.github/actions/setup-sfp
+        with:
+          gitea-token: ${{ secrets.GITEA_TOKEN }}
+          ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
+          ssh-host: ${{ vars.SSH_HOST }}
+          cli-version: ${{ vars.SFP_CLI_VERSION || 'latest' }}
+
+      - name: Update server
+        env:
+          DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
+          DOCKER_REGISTRY_TOKEN: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
+        run: |
+          TENANT="${{ vars.TENANT_NAME }}"
+          SSH_USER="${{ vars.SSH_USER || 'root' }}"
+          SSH_HOST="${{ vars.SSH_HOST }}"
+          BASE_DIR="${{ vars.BASE_DIR || './sfp-server' }}"
+
+          # Resolve image tag: workflow input > variable > "latest"
+          TAG="${{ inputs.docker_tag }}"
+          if [ -z "$TAG" ]; then
+            TAG="${{ vars.IMAGE_TAG || 'latest' }}"
+          fi
+
+          echo "Updating SFP Server"
+          echo "  Tenant:   $TENANT"
+          echo "  Host:     $SSH_HOST"
+          echo "  Tag:      $TAG"
+          echo "  Registry: $DOCKER_REGISTRY"
+
+          # Build the update command
+          UPDATE_CMD="sfp server update"
+          UPDATE_CMD="$UPDATE_CMD --tenant \"$TENANT\""
+          UPDATE_CMD="$UPDATE_CMD --base-dir \"$BASE_DIR\""
+          UPDATE_CMD="$UPDATE_CMD --secrets-provider custom"
+          UPDATE_CMD="$UPDATE_CMD --ssh-connection \"$SSH_USER@$SSH_HOST\""
+          UPDATE_CMD="$UPDATE_CMD --identity-file ~/.ssh/deploy_key"
+          UPDATE_CMD="$UPDATE_CMD --docker-tag \"$TAG\""
+
+          if [ "${{ inputs.skip_drain }}" = "true" ]; then
+            UPDATE_CMD="$UPDATE_CMD --skip-drain"
+          else
+            UPDATE_CMD="$UPDATE_CMD --drain-timeout ${{ inputs.drain_timeout }}"
+          fi
+
+          if [ "${{ inputs.skip_backup }}" = "true" ]; then
+            UPDATE_CMD="$UPDATE_CMD --skip-backup"
+          fi
+
+          eval "$UPDATE_CMD"
+
+      - name: Output update results
+        if: always()
+        run: |
+          TAG="${{ inputs.docker_tag }}"
+          if [ -z "$TAG" ]; then
+            TAG="${{ vars.IMAGE_TAG || 'latest' }}"
+          fi
+
+          echo "## SFP Server Update" >> $GITHUB_STEP_SUMMARY
+          echo "" >> $GITHUB_STEP_SUMMARY
+          echo "| Setting | Value |" >> $GITHUB_STEP_SUMMARY
+          echo "|---------|-------|" >> $GITHUB_STEP_SUMMARY
+          echo "| Tenant | ${{ vars.TENANT_NAME }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Host | ${{ vars.SSH_HOST }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Image Tag | $TAG |" >> $GITHUB_STEP_SUMMARY
+          echo "| Registry | ${{ vars.DOCKER_REGISTRY }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Skip Drain | ${{ inputs.skip_drain }} |" >> $GITHUB_STEP_SUMMARY
+          echo "| Skip Backup | ${{ inputs.skip_backup }} |" >> $GITHUB_STEP_SUMMARY