josedario87
2e3055e1b4
All checks were successful
build-and-deploy / build-and-deploy (push) Successful in 22s
- Reemplazar credenciales hardcoded por secrets - Usar REGISTRY_URL variable en lugar de hardcode - Usar RADIUS_CLIENTS_CIDR y RADIUS_SHARED_SECRET desde secrets - Mejorar seguridad eliminando valores sensibles del código Variables configuradas: - REGISTRY_URL = gitea.nucleoriofrio.com Secrets configurados: - REGISTRY_USERNAME - REGISTRY_PASSWORD - RADIUS_CLIENTS_CIDR - RADIUS_SHARED_SECRET
51 lines
1.9 KiB
YAML
51 lines
1.9 KiB
YAML
name: build-and-deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [ main ]
|
|
|
|
jobs:
|
|
build-and-deploy:
|
|
runs-on: docker
|
|
env:
|
|
REG: ${{ vars.REGISTRY_URL }}/${{ github.repository_owner }}
|
|
RADIUS_CLIENTS_CIDR: ${{ secrets.RADIUS_CLIENTS_CIDR }}
|
|
RADIUS_SHARED_SECRET: ${{ secrets.RADIUS_SHARED_SECRET }}
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
- uses: docker/setup-buildx-action@v2
|
|
- uses: docker/login-action@v2
|
|
with:
|
|
registry: ${{ vars.REGISTRY_URL }}
|
|
username: ${{ secrets.REGISTRY_USERNAME }}
|
|
password: ${{ secrets.REGISTRY_PASSWORD }}
|
|
|
|
- name: Build+push radiusnucleo (with SPA)
|
|
run: |
|
|
docker build -t $REG/radiusnucleo:${{ github.sha }} -t $REG/radiusnucleo:latest -f node-api/Dockerfile .
|
|
docker push $REG/radiusnucleo:${{ github.sha }}
|
|
docker push $REG/radiusnucleo:latest
|
|
|
|
- name: Build+push radiusnucleo-freeradius
|
|
run: |
|
|
docker build -t $REG/radiusnucleo-freeradius:${{ github.sha }} -t $REG/radiusnucleo-freeradius:latest ./freeradius
|
|
docker push $REG/radiusnucleo-freeradius:${{ github.sha }}
|
|
docker push $REG/radiusnucleo-freeradius:latest
|
|
|
|
- name: Ensure external docker networks exist
|
|
run: |
|
|
docker network inspect principal >/dev/null 2>&1 || docker network create principal
|
|
docker network inspect radiusnucleo_radius_net >/dev/null 2>&1 || docker network create radiusnucleo_radius_net
|
|
|
|
- name: Pull fresh images used in compose
|
|
run: docker compose -f docker-compose.yml pull
|
|
|
|
- name: Clean up stack
|
|
run: docker compose -f docker-compose.yml --project-name radiusnucleo down
|
|
|
|
- name: Update stack
|
|
run: docker compose -f docker-compose.yml --project-name radiusnucleo up -d --remove-orphans
|
|
|
|
- name: Show service status
|
|
run: docker compose -f docker-compose.yml --project-name radiusnucleo ps
|