171 lines
4.4 KiB
YAML
171 lines
4.4 KiB
YAML
# Cloonar TYPO3 Deployment Workflow
|
|
#
|
|
# Reusable workflow for deploying TYPO3 projects with Deployer.
|
|
#
|
|
# Usage in project's .forgejo/workflows/deploy.yaml:
|
|
# name: Deploy
|
|
# on:
|
|
# push:
|
|
# branches: [main]
|
|
# jobs:
|
|
# deploy-stage:
|
|
# uses: Cloonar/ci-templates/.forgejo/workflows/typo3-deploy.yaml@main
|
|
# with:
|
|
# target: stage
|
|
# php_version: '8.3'
|
|
# secrets:
|
|
# deploy_key: ${{ secrets.STAGE_KEY }}
|
|
|
|
name: TYPO3 Deploy
|
|
|
|
on:
|
|
workflow_call:
|
|
inputs:
|
|
target:
|
|
description: 'Deployment target (stage/production)'
|
|
required: true
|
|
type: string
|
|
task:
|
|
description: 'Deployer task (release:create, release:switch, deploy)'
|
|
required: false
|
|
type: string
|
|
default: 'deploy'
|
|
php_version:
|
|
description: 'PHP version'
|
|
required: false
|
|
type: string
|
|
default: '8.3'
|
|
node_version:
|
|
description: 'Node.js version (for frontend builds)'
|
|
required: false
|
|
type: string
|
|
default: '20'
|
|
run_tests:
|
|
description: 'Run static analysis before deploy'
|
|
required: false
|
|
type: boolean
|
|
default: false
|
|
build_frontend:
|
|
description: 'Run npm build'
|
|
required: false
|
|
type: boolean
|
|
default: false
|
|
deployer_file:
|
|
description: 'Path to deploy.php'
|
|
required: false
|
|
type: string
|
|
default: './build/deploy.php'
|
|
secrets:
|
|
deploy_key:
|
|
description: 'SSH private key for deployment'
|
|
required: true
|
|
|
|
env:
|
|
COMPOSER_ALLOW_SUPERUSER: 1
|
|
|
|
jobs:
|
|
static-analysis:
|
|
name: Static Analysis
|
|
runs-on: ubuntu-latest
|
|
if: ${{ inputs.run_tests }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup PHP
|
|
uses: shivammathur/setup-php@v2
|
|
with:
|
|
php-version: ${{ inputs.php_version }}
|
|
tools: composer
|
|
|
|
- name: Install dependencies
|
|
run: composer install --prefer-dist --no-progress --ignore-platform-reqs
|
|
|
|
- name: Run PHPStan
|
|
run: composer test:phpstan || true
|
|
continue-on-error: true
|
|
|
|
- name: Run Psalm
|
|
run: composer test:psalm || true
|
|
continue-on-error: true
|
|
|
|
build:
|
|
name: Build
|
|
runs-on: ubuntu-latest
|
|
needs: [static-analysis]
|
|
if: ${{ always() && (needs.static-analysis.result == 'success' || needs.static-analysis.result == 'skipped') }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Setup PHP
|
|
uses: shivammathur/setup-php@v2
|
|
with:
|
|
php-version: ${{ inputs.php_version }}
|
|
tools: composer
|
|
|
|
- name: Setup Node.js
|
|
if: ${{ inputs.build_frontend }}
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: ${{ inputs.node_version }}
|
|
cache: 'npm'
|
|
|
|
- name: Install PHP dependencies
|
|
run: composer install --prefer-dist --no-progress --no-dev --ignore-platform-reqs
|
|
|
|
- name: Install Node dependencies
|
|
if: ${{ inputs.build_frontend }}
|
|
run: npm ci
|
|
|
|
- name: Build frontend
|
|
if: ${{ inputs.build_frontend }}
|
|
run: npm run build
|
|
|
|
- name: Create build artifact
|
|
run: |
|
|
tar -czf build.tar.gz \
|
|
bin public packages config vendor build composer.json composer.lock \
|
|
$([ -d "node_modules" ] && echo "node_modules") \
|
|
$([ -d "dist" ] && echo "dist") \
|
|
2>/dev/null || true
|
|
|
|
- name: Upload artifact
|
|
uses: actions/upload-artifact@v4
|
|
with:
|
|
name: build-${{ github.sha }}
|
|
path: build.tar.gz
|
|
retention-days: 1
|
|
|
|
deploy:
|
|
name: Deploy to ${{ inputs.target }}
|
|
runs-on: ubuntu-latest
|
|
needs: [build]
|
|
|
|
steps:
|
|
- name: Setup PHP
|
|
uses: shivammathur/setup-php@v2
|
|
with:
|
|
php-version: ${{ inputs.php_version }}
|
|
|
|
- name: Download artifact
|
|
uses: actions/download-artifact@v4
|
|
with:
|
|
name: build-${{ github.sha }}
|
|
|
|
- name: Extract artifact
|
|
run: |
|
|
tar xf build.tar.gz
|
|
rm build.tar.gz
|
|
|
|
- name: Install SSH and rsync
|
|
run: |
|
|
apt-get update
|
|
apt-get install -y openssh-client rsync
|
|
|
|
- name: Deploy with Deployer
|
|
uses: deployphp/action@v1
|
|
with:
|
|
deployer-binary: "./bin/dep"
|
|
dep: --file=${{ inputs.deployer_file }} ${{ inputs.task }} ${{ inputs.target }}
|
|
private-key: ${{ secrets.deploy_key }}
|