name: CI on: push: branches: - main - "*" pull_request: branches: - main jobs: ci: name: Lint, Test & Build runs-on: ubuntu-24.04 services: postgres: image: pgvector/pgvector:pg16 env: POSTGRES_USER: memento_test POSTGRES_PASSWORD: memento_test POSTGRES_DB: memento_test options: >- --health-cmd pg_isready --health-interval 5s --health-timeout 5s --health-retries 5 defaults: run: working-directory: memento-note env: DATABASE_URL: "postgresql://memento_test:memento_test@postgres:5432/memento_test" steps: - name: Checkout uses: actions/checkout@v4 - name: Setup Node 22 uses: actions/setup-node@v4 with: node-version: "22" cache: "npm" cache-dependency-path: memento-note/package-lock.json - name: Install dependencies run: npm ci - name: Generate Prisma client run: npx prisma generate - name: Setup test database run: | if command -v sudo >/dev/null 2>&1; then SUDO="sudo"; else SUDO=""; fi $SUDO apt-get update -qq && $SUDO apt-get install -y -qq postgresql-client for i in $(seq 1 30); do PGPASSWORD=memento_test pg_isready -h postgres -U memento_test -d memento_test && break [ "$i" -eq 30 ] && exit 1 sleep 2 done PGPASSWORD=memento_test psql -h postgres -U memento_test -d memento_test -c "CREATE EXTENSION IF NOT EXISTS vector;" npx prisma migrate deploy - name: Lint run: npm run lint - name: Unit tests run: npm run test:unit - name: Build run: npm run build - name: Pack web artifact for deploy if: github.ref == 'refs/heads/main' && github.event_name == 'push' working-directory: memento-note run: | tar czf ../web-artifact.tgz \ .next/standalone .next/static public prisma \ node_modules/.prisma node_modules/@prisma node_modules/prisma \ docker-entrypoint.sh socket-server.ts tsconfig.json ls -lh ../web-artifact.tgz - name: Upload web artifact if: github.ref == 'refs/heads/main' && github.event_name == 'push' uses: actions/upload-artifact@v3 continue-on-error: true with: name: web-artifact path: web-artifact.tgz retention-days: 2 deploy: name: Deploy production (on server) if: github.ref == 'refs/heads/main' && github.event_name == 'push' runs-on: docker-host steps: - name: Sync deploy scripts on server run: | git config --global --add safe.directory /opt/memento || true cd /opt/memento git fetch origin main git reset --hard origin/main - name: Download web artifact uses: actions/download-artifact@v3 continue-on-error: true with: name: web-artifact - name: Update .env.docker env: APP_URL: ${{ vars.APP_URL }} NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET }} ADMIN_EMAIL: ${{ vars.ADMIN_EMAIL }} ALLOW_REGISTRATION: ${{ vars.ALLOW_REGISTRATION }} POSTGRES_USER: ${{ vars.POSTGRES_USER }} POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }} POSTGRES_DB: ${{ vars.POSTGRES_DB }} POSTGRES_PORT: ${{ vars.POSTGRES_PORT }} AI_PROVIDER_TAGS: ${{ vars.AI_PROVIDER_TAGS }} AI_MODEL_TAGS: ${{ vars.AI_MODEL_TAGS }} AI_PROVIDER_EMBEDDING: ${{ vars.AI_PROVIDER_EMBEDDING }} AI_MODEL_EMBEDDING: ${{ vars.AI_MODEL_EMBEDDING }} AI_PROVIDER_CHAT: ${{ vars.AI_PROVIDER_CHAT }} AI_MODEL_CHAT: ${{ vars.AI_MODEL_CHAT }} CUSTOM_OPENAI_BASE_URL: ${{ vars.CUSTOM_OPENAI_BASE_URL }} CUSTOM_OPENAI_API_KEY: ${{ secrets.CUSTOM_OPENAI_API_KEY }} OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} OLLAMA_BASE_URL: ${{ vars.OLLAMA_BASE_URL }} EMAIL_PROVIDER: ${{ vars.EMAIL_PROVIDER }} SMTP_FROM: ${{ vars.SMTP_FROM }} RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }} SMTP_HOST: ${{ vars.SMTP_HOST }} SMTP_PORT: ${{ vars.SMTP_PORT }} SMTP_USER: ${{ vars.SMTP_USER }} SMTP_PASS: ${{ secrets.SMTP_PASS }} SMTP_SECURE: ${{ vars.SMTP_SECURE }} SMTP_IGNORE_CERT: ${{ vars.SMTP_IGNORE_CERT }} MCP_MODE: ${{ vars.MCP_MODE }} MCP_PORT: ${{ vars.MCP_PORT }} WEB_SEARCH_PROVIDER: ${{ vars.WEB_SEARCH_PROVIDER }} SEARXNG_URL: ${{ vars.SEARXNG_URL }} BRAVE_SEARCH_API_KEY: ${{ secrets.BRAVE_SEARCH_API_KEY }} JINA_API_KEY: ${{ secrets.JINA_API_KEY }} AUTH_GOOGLE_ID: ${{ vars.AUTH_GOOGLE_ID }} AUTH_GOOGLE_SECRET: ${{ secrets.AUTH_GOOGLE_SECRET }} SOCKET_INTERNAL_KEY: ${{ secrets.SOCKET_INTERNAL_KEY }} SOCKET_PORT: ${{ vars.SOCKET_PORT }} SOCKET_HTTP_PORT: ${{ vars.SOCKET_HTTP_PORT }} SOCKET_INTERNAL_URL: ${{ vars.SOCKET_INTERNAL_URL }} NEXT_PUBLIC_SOCKET_URL: ${{ vars.NEXT_PUBLIC_SOCKET_URL }} TELEGRAM_BOT_TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }} TELEGRAM_CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }} run: | ENV_FILE="/opt/memento/.env.docker" touch "$ENV_FILE" upsert() { local key="$1" val="$2" [ -z "$val" ] && return sed -i "/^[[:space:]]*${key}=/d" "$ENV_FILE" echo "${key}=\"${val}\"" >> "$ENV_FILE" } upsert NEXTAUTH_URL "$APP_URL" upsert NEXTAUTH_SECRET "$NEXTAUTH_SECRET" upsert ADMIN_EMAIL "$ADMIN_EMAIL" upsert ALLOW_REGISTRATION "$ALLOW_REGISTRATION" upsert POSTGRES_USER "$POSTGRES_USER" upsert POSTGRES_PASSWORD "$POSTGRES_PASSWORD" upsert POSTGRES_DB "$POSTGRES_DB" upsert POSTGRES_PORT "$POSTGRES_PORT" upsert AI_PROVIDER_TAGS "$AI_PROVIDER_TAGS" upsert AI_MODEL_TAGS "$AI_MODEL_TAGS" upsert AI_PROVIDER_EMBEDDING "$AI_PROVIDER_EMBEDDING" upsert AI_MODEL_EMBEDDING "$AI_MODEL_EMBEDDING" upsert AI_PROVIDER_CHAT "$AI_PROVIDER_CHAT" upsert AI_MODEL_CHAT "$AI_MODEL_CHAT" upsert CUSTOM_OPENAI_BASE_URL "$CUSTOM_OPENAI_BASE_URL" upsert CUSTOM_OPENAI_API_KEY "$CUSTOM_OPENAI_API_KEY" upsert OPENAI_API_KEY "$OPENAI_API_KEY" upsert OLLAMA_BASE_URL "$OLLAMA_BASE_URL" upsert REDIS_HOST "redis" upsert EMAIL_PROVIDER "$EMAIL_PROVIDER" upsert SMTP_FROM "$SMTP_FROM" upsert RESEND_API_KEY "$RESEND_API_KEY" upsert SMTP_HOST "$SMTP_HOST" upsert SMTP_PORT "$SMTP_PORT" upsert SMTP_USER "$SMTP_USER" upsert SMTP_PASS "$SMTP_PASS" upsert SMTP_SECURE "$SMTP_SECURE" upsert SMTP_IGNORE_CERT "$SMTP_IGNORE_CERT" upsert MCP_MODE "$MCP_MODE" upsert MCP_PORT "$MCP_PORT" upsert WEB_SEARCH_PROVIDER "$WEB_SEARCH_PROVIDER" upsert SEARXNG_URL "$SEARXNG_URL" upsert BRAVE_SEARCH_API_KEY "$BRAVE_SEARCH_API_KEY" upsert JINA_API_KEY "$JINA_API_KEY" upsert AUTH_GOOGLE_ID "$AUTH_GOOGLE_ID" upsert AUTH_GOOGLE_SECRET "$AUTH_GOOGLE_SECRET" upsert SOCKET_INTERNAL_KEY "$SOCKET_INTERNAL_KEY" upsert SOCKET_PORT "$SOCKET_PORT" upsert SOCKET_HTTP_PORT "$SOCKET_HTTP_PORT" upsert SOCKET_INTERNAL_URL "$SOCKET_INTERNAL_URL" upsert NEXT_PUBLIC_SOCKET_URL "$NEXT_PUBLIC_SOCKET_URL" upsert TELEGRAM_BOT_TOKEN "$TELEGRAM_BOT_TOKEN" upsert TELEGRAM_CHAT_ID "$TELEGRAM_CHAT_ID" - name: Install docker and compose inside runner run: | if command -v apk >/dev/null 2>&1; then apk add --no-cache docker-cli docker-cli-compose jq curl git || true fi - name: Deploy on 192.168.1.190 env: ARTIFACT_TGZ: ${{ github.workspace }}/web-artifact.tgz EXPECTED_COMMIT: ${{ github.sha }} run: bash /opt/memento/scripts/deploy-prod.sh