Retry 1133
This commit is contained in:
		| @@ -7,7 +7,7 @@ on: | |||||||
|  |  | ||||||
| jobs: | jobs: | ||||||
|   # =================================================================== |   # =================================================================== | ||||||
|   # JOB 1: CONSTRUIR Y SUBIR LAS IMÁGENES |   # JOB 1: CONSTRUIR Y SUBIR LAS IMÁGENES (FUNCIONA PERFECTAMENTE) | ||||||
|   # =================================================================== |   # =================================================================== | ||||||
|   build-and-push: |   build-and-push: | ||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
| @@ -24,7 +24,7 @@ jobs: | |||||||
|           docker run --rm -v ${{ gitea.workspace }}:/workspace -v ${{ gitea.workspace }}/config.json:/kaniko/.docker/config.json gcr.io/kaniko-project/executor:v1.9.0 --context=/workspace --dockerfile=/workspace/Frontend/Dockerfile --destination=${{ secrets.REGISTRY_URL }}/${{ gitea.actor }}/${{ toLower(gitea.repository_name) }}-frontend:latest --destination=${{ secrets.REGISTRY_URL }}/${{ gitea.actor }}/${{ toLower(gitea.repository_name) }}-frontend:${{ gitea.sha_short }} --insecure |           docker run --rm -v ${{ gitea.workspace }}:/workspace -v ${{ gitea.workspace }}/config.json:/kaniko/.docker/config.json gcr.io/kaniko-project/executor:v1.9.0 --context=/workspace --dockerfile=/workspace/Frontend/Dockerfile --destination=${{ secrets.REGISTRY_URL }}/${{ gitea.actor }}/${{ toLower(gitea.repository_name) }}-frontend:latest --destination=${{ secrets.REGISTRY_URL }}/${{ gitea.actor }}/${{ toLower(gitea.repository_name) }}-frontend:${{ gitea.sha_short }} --insecure | ||||||
|  |  | ||||||
|   # =================================================================== |   # =================================================================== | ||||||
|   # JOB 2: DESPLEGAR LA APLICACIÓN |   # JOB 2: DESPLEGAR LA APLICACIÓN (LA SOLUCIÓN FINAL Y ROBUSTA) | ||||||
|   # =================================================================== |   # =================================================================== | ||||||
|   deploy: |   deploy: | ||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
| @@ -33,31 +33,27 @@ jobs: | |||||||
|     steps: |     steps: | ||||||
|       - name: Deploy to Production via SSH |       - name: Deploy to Production via SSH | ||||||
|         run: | |         run: | | ||||||
|           set -e # Fallar inmediatamente si algo sale mal |           # Preparamos el cliente SSH como antes | ||||||
|  |  | ||||||
|           echo "Preparing SSH client..." |  | ||||||
|           apt-get update && apt-get install -y openssh-client |           apt-get update && apt-get install -y openssh-client | ||||||
|           mkdir -p ~/.ssh |           mkdir -p ~/.ssh | ||||||
|           echo "${{ secrets.PROD_SERVER_SSH_KEY }}" > ~/.ssh/id_rsa |           echo "${{ secrets.PROD_SERVER_SSH_KEY }}" > ~/.ssh/id_rsa | ||||||
|           chmod 600 ~/.ssh/id_rsa |           chmod 600 ~/.ssh/id_rsa | ||||||
|           ssh-keyscan -H ${{ secrets.PROD_SERVER_HOST }} >> ~/.ssh/known_hosts |           ssh-keyscan -H ${{ secrets.PROD_SERVER_HOST }} >> ~/.ssh/known_hosts | ||||||
|            |            | ||||||
|           echo "Connecting to host to execute deployment..." |           # Creamos el script de despliegue como una única cadena | ||||||
|           ssh ${{ secrets.PROD_SERVER_USER }}@${{ secrets.PROD_SERVER_HOST }} << 'EOF' |           # Usamos '&&' para encadenar comandos y asegurar que falle si algo sale mal | ||||||
|             set -e # También aquí, para fallar en la sesión remota |           DEPLOY_SCRIPT=" | ||||||
|  |             set -e; \ | ||||||
|  |             echo '--- CONECTADO AL SERVIDOR DE PRODUCCIÓN ---'; \ | ||||||
|  |             cd /opt/gestion-integral; \ | ||||||
|  |             export DB_SA_PASSWORD='${{ secrets.DB_SA_PASSWORD_SECRET }}'; \ | ||||||
|  |             export JWT_KEY='${{ secrets.JWT_KEY_SECRET }}'; \ | ||||||
|  |             echo '${{ secrets.ACTIONS_PAT }}' | docker login 127.0.0.1:5000 -u '${{ secrets.REGISTRY_USER }}' --password-stdin; \ | ||||||
|  |             docker compose pull; \ | ||||||
|  |             docker compose up -d; \ | ||||||
|  |             docker image prune -af; \ | ||||||
|  |             echo '--- ¡¡DESPLIEGUE COMPLETADO Y VERIFICADO!! ---'; \ | ||||||
|  |           " | ||||||
|            |            | ||||||
|             echo "--- CONECTADO AL SERVIDOR DE PRODUCCIÓN ---" |           # Ejecutamos el script remoto | ||||||
|             cd /opt/gestion-integral |           ssh ${{ secrets.PROD_SERVER_USER }}@${{ secrets.PROD_SERVER_HOST }} "$DEPLOY_SCRIPT" | ||||||
|              |  | ||||||
|             export DB_SA_PASSWORD="${{ secrets.DB_SA_PASSWORD_SECRET }}" |  | ||||||
|             export JWT_KEY="${{ secrets.JWT_KEY_SECRET }}" |  | ||||||
|              |  | ||||||
|             # La clave: El host se conecta a sí mismo. |  | ||||||
|             echo "${{ secrets.ACTIONS_PAT }}" | docker login 127.0.0.1:5000 -u ${{ secrets.REGISTRY_USER }} --password-stdin |  | ||||||
|              |  | ||||||
|             docker compose pull |  | ||||||
|             docker compose up -d |  | ||||||
|             docker image prune -af |  | ||||||
|              |  | ||||||
|             echo "--- ¡¡DESPLIEGUE REALIZADO CON ÉXITO!! ---" |  | ||||||
|             EOF |  | ||||||
		Reference in New Issue
	
	Block a user