143 lines
5.7 KiB
YAML
143 lines
5.7 KiB
YAML
name: Initialize SFP Server
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
inputs:
|
|
environment:
|
|
description: 'Target environment'
|
|
type: environment
|
|
required: true
|
|
force:
|
|
description: 'Force re-initialization (destroys existing data)'
|
|
type: boolean
|
|
default: false
|
|
tls_mode:
|
|
description: 'TLS certificate mode'
|
|
type: choice
|
|
options:
|
|
- 'letsencrypt'
|
|
- 'custom'
|
|
- 'none'
|
|
default: 'letsencrypt'
|
|
|
|
jobs:
|
|
init:
|
|
name: 'Initialize server (${{ inputs.environment }})'
|
|
runs-on: ubuntu-latest
|
|
environment: ${{ inputs.environment }}
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Validate required variables
|
|
run: |
|
|
MISSING=""
|
|
[ -z "${{ vars.SSH_HOST }}" ] && MISSING="$MISSING SSH_HOST"
|
|
[ -z "${{ vars.TENANT_NAME }}" ] && MISSING="$MISSING TENANT_NAME"
|
|
[ -z "${{ vars.DOMAIN }}" ] && MISSING="$MISSING DOMAIN"
|
|
[ -z "${{ vars.DOCKER_REGISTRY }}" ] && MISSING="$MISSING DOCKER_REGISTRY"
|
|
[ -z "${{ vars.IMAGE_FQDN }}" ] && MISSING="$MISSING IMAGE_FQDN"
|
|
|
|
if [ -n "$MISSING" ]; then
|
|
echo "Missing required variables in environment '${{ inputs.environment }}':$MISSING"
|
|
echo ""
|
|
echo "Configure these in: Settings > Environments > ${{ inputs.environment }} > Variables"
|
|
exit 1
|
|
fi
|
|
|
|
- name: Setup SFP CLI and SSH
|
|
id: setup
|
|
uses: ./.github/actions/setup-sfp
|
|
with:
|
|
docker-registry: ${{ vars.DOCKER_REGISTRY }}
|
|
docker-registry-token: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
|
|
image-fqdn: ${{ vars.IMAGE_FQDN }}
|
|
image-tag: ${{ vars.IMAGE_TAG || 'latest' }}
|
|
ssh-private-key: ${{ secrets.SSH_PRIVATE_KEY }}
|
|
ssh-host: ${{ vars.SSH_HOST }}
|
|
|
|
- name: Initialize server
|
|
env:
|
|
DOCKER_REGISTRY: ${{ vars.DOCKER_REGISTRY }}
|
|
DOCKER_REGISTRY_TOKEN: ${{ secrets.DOCKER_REGISTRY_TOKEN }}
|
|
ORIGIN_CERT: ${{ secrets.ORIGIN_CERT }}
|
|
ORIGIN_KEY: ${{ secrets.ORIGIN_KEY }}
|
|
SFP_IMAGE: ${{ steps.setup.outputs.sfp-image }}
|
|
run: |
|
|
TENANT="${{ vars.TENANT_NAME }}"
|
|
DOMAIN="${{ vars.DOMAIN }}"
|
|
SSH_USER="${{ vars.SSH_USER || 'root' }}"
|
|
SSH_HOST="${{ vars.SSH_HOST }}"
|
|
TLS_MODE="${{ inputs.tls_mode }}"
|
|
WORKERS="${{ vars.WORKERS || '1' }}"
|
|
BASE_DIR="${{ vars.BASE_DIR || './sfp-server' }}"
|
|
IMAGE_FQDN="${{ vars.IMAGE_FQDN }}"
|
|
IMAGE_TAG="${{ vars.IMAGE_TAG || 'latest' }}"
|
|
|
|
echo "Initializing SFP Server"
|
|
echo " Environment: ${{ inputs.environment }}"
|
|
echo " Tenant: $TENANT"
|
|
echo " Domain: $DOMAIN"
|
|
echo " Host: $SSH_HOST"
|
|
echo " TLS Mode: $TLS_MODE"
|
|
echo " Workers: $WORKERS"
|
|
echo " Image: $SFP_IMAGE"
|
|
|
|
INIT_CMD="sfp server init"
|
|
INIT_CMD="$INIT_CMD --tenant \"$TENANT\""
|
|
INIT_CMD="$INIT_CMD --mode prod"
|
|
INIT_CMD="$INIT_CMD --domain \"$DOMAIN\""
|
|
INIT_CMD="$INIT_CMD --tls-mode \"$TLS_MODE\""
|
|
INIT_CMD="$INIT_CMD --workers $WORKERS"
|
|
INIT_CMD="$INIT_CMD --base-dir \"$BASE_DIR\""
|
|
INIT_CMD="$INIT_CMD --supabase-mode self-hosted"
|
|
INIT_CMD="$INIT_CMD --secrets-provider custom"
|
|
INIT_CMD="$INIT_CMD --no-interactive"
|
|
INIT_CMD="$INIT_CMD --ssh-connection \"$SSH_USER@$SSH_HOST\""
|
|
INIT_CMD="$INIT_CMD --identity-file /root/.ssh/deploy_key"
|
|
INIT_CMD="$INIT_CMD --image \"${IMAGE_FQDN}:${IMAGE_TAG}\""
|
|
|
|
if [ "${{ inputs.force }}" = "true" ]; then
|
|
INIT_CMD="$INIT_CMD --force"
|
|
fi
|
|
|
|
SSH_DIR=$(mktemp -d)
|
|
cp ~/.ssh/deploy_key "$SSH_DIR/deploy_key"
|
|
cp ~/.ssh/known_hosts "$SSH_DIR/known_hosts"
|
|
chmod 600 "$SSH_DIR/deploy_key"
|
|
chmod 644 "$SSH_DIR/known_hosts"
|
|
|
|
docker run --rm \
|
|
--user root \
|
|
-v "$SSH_DIR/deploy_key":/root/.ssh/deploy_key \
|
|
-v "$SSH_DIR/known_hosts":/root/.ssh/known_hosts \
|
|
-e DOCKER_REGISTRY \
|
|
-e DOCKER_REGISTRY_TOKEN \
|
|
-e ORIGIN_CERT \
|
|
-e ORIGIN_KEY \
|
|
"$SFP_IMAGE" \
|
|
bash -c "chmod 600 /root/.ssh/deploy_key && $INIT_CMD"
|
|
|
|
rm -rf "$SSH_DIR"
|
|
|
|
- name: Output init results
|
|
if: always()
|
|
run: |
|
|
echo "## SFP Server Initialization" >> $GITHUB_STEP_SUMMARY
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Setting | Value |" >> $GITHUB_STEP_SUMMARY
|
|
echo "|---------|-------|" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Environment | ${{ inputs.environment }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Tenant | ${{ vars.TENANT_NAME }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Domain | ${{ vars.DOMAIN }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Host | ${{ vars.SSH_HOST }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| TLS Mode | ${{ inputs.tls_mode }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "| Image | ${{ steps.setup.outputs.sfp-image }} |" >> $GITHUB_STEP_SUMMARY
|
|
echo "" >> $GITHUB_STEP_SUMMARY
|
|
echo "### Admin Credentials" >> $GITHUB_STEP_SUMMARY
|
|
echo "Credentials are stored securely on the server. To retrieve them:" >> $GITHUB_STEP_SUMMARY
|
|
echo '```' >> $GITHUB_STEP_SUMMARY
|
|
echo "ssh ${{ vars.SSH_USER || 'root' }}@${{ vars.SSH_HOST }} \"cat ${{ vars.BASE_DIR || './sfp-server' }}/tenants/${{ vars.TENANT_NAME }}/credentials.json\"" >> $GITHUB_STEP_SUMMARY
|
|
echo '```' >> $GITHUB_STEP_SUMMARY
|