99 lines
2.6 KiB
YAML
99 lines
2.6 KiB
YAML
steps:
|
|
# Validate all compose files have valid syntax
|
|
validate:
|
|
image: docker:latest
|
|
commands:
|
|
- docker-compose config -f git.yaml > /dev/null
|
|
- echo "✓ git.yaml syntax valid"
|
|
volumes:
|
|
- /var/run/docker.sock:/var/run/docker.sock
|
|
when:
|
|
branch: main
|
|
|
|
# Deploy to Docker Swarm
|
|
deploy:
|
|
image: alpine:latest
|
|
commands:
|
|
- apk add --no-cache openssh-client
|
|
- mkdir -p ~/.ssh
|
|
- echo "$SSH_KEY" | base64 -d > ~/.ssh/id_rsa
|
|
- chmod 600 ~/.ssh/id_rsa
|
|
- ssh-keyscan -H docker-2.local >> ~/.ssh/known_hosts 2>/dev/null || true
|
|
|
|
# Copy compose files to swarm manager
|
|
- scp -o StrictHostKeyChecking=no -r *.yaml root@docker-2.local:/tmp/compose/
|
|
- scp -o StrictHostKeyChecking=no *.env root@docker-2.local:/tmp/compose/ || true
|
|
|
|
# Deploy stacks via SSH
|
|
- |
|
|
ssh -o StrictHostKeyChecking=no root@docker-2.local << 'DEPLOY'
|
|
cd /tmp/compose
|
|
docker stack deploy -c git.yaml git
|
|
echo "✓ Git stack deployed"
|
|
DEPLOY
|
|
secrets:
|
|
- ssh_key
|
|
when:
|
|
branch: main
|
|
event: push
|
|
|
|
# Verify deployment success
|
|
verify:
|
|
image: alpine:latest
|
|
commands:
|
|
- apk add --no-cache openssh-client
|
|
- mkdir -p ~/.ssh
|
|
- echo "$SSH_KEY" | base64 -d > ~/.ssh/id_rsa
|
|
- chmod 600 ~/.ssh/id_rsa
|
|
- ssh-keyscan -H docker-2.local >> ~/.ssh/known_hosts 2>/dev/null || true
|
|
|
|
# Check stack status
|
|
- |
|
|
ssh -o StrictHostKeyChecking=no root@docker-2.local << 'VERIFY'
|
|
echo "Git Stack Status:"
|
|
docker stack ps git
|
|
VERIFY
|
|
secrets:
|
|
- ssh_key
|
|
when:
|
|
branch: main
|
|
status: success
|
|
|
|
# Notify Teams on success
|
|
notify-success:
|
|
image: alpine:latest
|
|
commands:
|
|
- apk add --no-cache curl
|
|
- |
|
|
curl -X POST -H 'Content-Type: application/json' \
|
|
-d '{
|
|
"title": "✅ Compose Deploy Success",
|
|
"text": "homelab/compose-files deployed to Docker Swarm",
|
|
"themeColor": "00aa00"
|
|
}' \
|
|
"$TEAMS_WEBHOOK"
|
|
secrets:
|
|
- teams_webhook
|
|
when:
|
|
branch: main
|
|
status: success
|
|
|
|
# Notify Teams on failure
|
|
notify-failure:
|
|
image: alpine:latest
|
|
commands:
|
|
- apk add --no-cache curl
|
|
- |
|
|
curl -X POST -H 'Content-Type: application/json' \
|
|
-d '{
|
|
"title": "❌ Compose Deploy Failed",
|
|
"text": "homelab/compose-files deployment failed",
|
|
"themeColor": "ff0000"
|
|
}' \
|
|
"$TEAMS_WEBHOOK"
|
|
secrets:
|
|
- teams_webhook
|
|
when:
|
|
branch: main
|
|
status: failure
|