216 lines
8.7 KiB
YAML
216 lines
8.7 KiB
YAML
name: CI
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- "*"
|
|
pull_request:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
ci:
|
|
name: Lint, Test & Build
|
|
runs-on: ubuntu-24.04
|
|
services:
|
|
postgres:
|
|
image: pgvector/pgvector:pg16
|
|
env:
|
|
POSTGRES_USER: memento_test
|
|
POSTGRES_PASSWORD: memento_test
|
|
POSTGRES_DB: memento_test
|
|
options: >-
|
|
--health-cmd pg_isready
|
|
--health-interval 5s
|
|
--health-timeout 5s
|
|
--health-retries 5
|
|
defaults:
|
|
run:
|
|
working-directory: memento-note
|
|
env:
|
|
DATABASE_URL: "postgresql://memento_test:memento_test@postgres:5432/memento_test"
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Setup Node 22
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: "22"
|
|
cache: "npm"
|
|
cache-dependency-path: memento-note/package-lock.json
|
|
|
|
- name: Install dependencies
|
|
run: npm ci
|
|
|
|
- name: Generate Prisma client
|
|
run: npx prisma generate
|
|
|
|
- name: Setup test database
|
|
run: |
|
|
if command -v sudo >/dev/null 2>&1; then SUDO="sudo"; else SUDO=""; fi
|
|
$SUDO apt-get update -qq && $SUDO apt-get install -y -qq postgresql-client
|
|
for i in $(seq 1 30); do
|
|
PGPASSWORD=memento_test pg_isready -h postgres -U memento_test -d memento_test && break
|
|
[ "$i" -eq 30 ] && exit 1
|
|
sleep 2
|
|
done
|
|
PGPASSWORD=memento_test psql -h postgres -U memento_test -d memento_test -c "CREATE EXTENSION IF NOT EXISTS vector;"
|
|
npx prisma migrate deploy
|
|
|
|
- name: Lint
|
|
run: npm run lint
|
|
|
|
- name: Unit tests
|
|
run: npm run test:unit
|
|
|
|
- name: Build
|
|
run: npm run build
|
|
|
|
- name: Pack web artifact for deploy
|
|
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
|
|
working-directory: memento-note
|
|
run: |
|
|
tar czf ../web-artifact.tgz \
|
|
.next/standalone .next/static public prisma \
|
|
node_modules/.prisma node_modules/@prisma node_modules/prisma \
|
|
docker-entrypoint.sh socket-server.ts tsconfig.json
|
|
ls -lh ../web-artifact.tgz
|
|
|
|
- name: Upload web artifact
|
|
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
|
|
uses: actions/upload-artifact@v3
|
|
continue-on-error: true
|
|
with:
|
|
name: web-artifact
|
|
path: web-artifact.tgz
|
|
retention-days: 2
|
|
|
|
deploy:
|
|
name: Deploy production (on server)
|
|
if: github.ref == 'refs/heads/main' && github.event_name == 'push'
|
|
runs-on: docker-host
|
|
steps:
|
|
- name: Sync deploy scripts on server
|
|
run: |
|
|
git config --global --add safe.directory /opt/memento || true
|
|
cd /opt/memento
|
|
git fetch origin main
|
|
git reset --hard origin/main
|
|
|
|
- name: Download web artifact
|
|
uses: actions/download-artifact@v3
|
|
continue-on-error: true
|
|
with:
|
|
name: web-artifact
|
|
|
|
- name: Update .env.docker
|
|
env:
|
|
APP_URL: ${{ vars.APP_URL }}
|
|
NEXTAUTH_SECRET: ${{ secrets.NEXTAUTH_SECRET }}
|
|
ADMIN_EMAIL: ${{ vars.ADMIN_EMAIL }}
|
|
ALLOW_REGISTRATION: ${{ vars.ALLOW_REGISTRATION }}
|
|
POSTGRES_USER: ${{ vars.POSTGRES_USER }}
|
|
POSTGRES_PASSWORD: ${{ secrets.POSTGRES_PASSWORD }}
|
|
POSTGRES_DB: ${{ vars.POSTGRES_DB }}
|
|
POSTGRES_PORT: ${{ vars.POSTGRES_PORT }}
|
|
AI_PROVIDER_TAGS: ${{ vars.AI_PROVIDER_TAGS }}
|
|
AI_MODEL_TAGS: ${{ vars.AI_MODEL_TAGS }}
|
|
AI_PROVIDER_EMBEDDING: ${{ vars.AI_PROVIDER_EMBEDDING }}
|
|
AI_MODEL_EMBEDDING: ${{ vars.AI_MODEL_EMBEDDING }}
|
|
AI_PROVIDER_CHAT: ${{ vars.AI_PROVIDER_CHAT }}
|
|
AI_MODEL_CHAT: ${{ vars.AI_MODEL_CHAT }}
|
|
CUSTOM_OPENAI_BASE_URL: ${{ vars.CUSTOM_OPENAI_BASE_URL }}
|
|
CUSTOM_OPENAI_API_KEY: ${{ secrets.CUSTOM_OPENAI_API_KEY }}
|
|
OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}
|
|
OLLAMA_BASE_URL: ${{ vars.OLLAMA_BASE_URL }}
|
|
EMAIL_PROVIDER: ${{ vars.EMAIL_PROVIDER }}
|
|
SMTP_FROM: ${{ vars.SMTP_FROM }}
|
|
RESEND_API_KEY: ${{ secrets.RESEND_API_KEY }}
|
|
SMTP_HOST: ${{ vars.SMTP_HOST }}
|
|
SMTP_PORT: ${{ vars.SMTP_PORT }}
|
|
SMTP_USER: ${{ vars.SMTP_USER }}
|
|
SMTP_PASS: ${{ secrets.SMTP_PASS }}
|
|
SMTP_SECURE: ${{ vars.SMTP_SECURE }}
|
|
SMTP_IGNORE_CERT: ${{ vars.SMTP_IGNORE_CERT }}
|
|
MCP_MODE: ${{ vars.MCP_MODE }}
|
|
MCP_PORT: ${{ vars.MCP_PORT }}
|
|
WEB_SEARCH_PROVIDER: ${{ vars.WEB_SEARCH_PROVIDER }}
|
|
SEARXNG_URL: ${{ vars.SEARXNG_URL }}
|
|
BRAVE_SEARCH_API_KEY: ${{ secrets.BRAVE_SEARCH_API_KEY }}
|
|
JINA_API_KEY: ${{ secrets.JINA_API_KEY }}
|
|
AUTH_GOOGLE_ID: ${{ vars.AUTH_GOOGLE_ID }}
|
|
AUTH_GOOGLE_SECRET: ${{ secrets.AUTH_GOOGLE_SECRET }}
|
|
SOCKET_INTERNAL_KEY: ${{ secrets.SOCKET_INTERNAL_KEY }}
|
|
SOCKET_PORT: ${{ vars.SOCKET_PORT }}
|
|
SOCKET_HTTP_PORT: ${{ vars.SOCKET_HTTP_PORT }}
|
|
SOCKET_INTERNAL_URL: ${{ vars.SOCKET_INTERNAL_URL }}
|
|
NEXT_PUBLIC_SOCKET_URL: ${{ vars.NEXT_PUBLIC_SOCKET_URL }}
|
|
TELEGRAM_BOT_TOKEN: ${{ secrets.TELEGRAM_BOT_TOKEN }}
|
|
TELEGRAM_CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }}
|
|
run: |
|
|
ENV_FILE="/opt/memento/.env.docker"
|
|
touch "$ENV_FILE"
|
|
upsert() {
|
|
local key="$1" val="$2"
|
|
[ -z "$val" ] && return
|
|
sed -i "/^[[:space:]]*${key}=/d" "$ENV_FILE"
|
|
echo "${key}=\"${val}\"" >> "$ENV_FILE"
|
|
}
|
|
upsert NEXTAUTH_URL "$APP_URL"
|
|
upsert NEXTAUTH_SECRET "$NEXTAUTH_SECRET"
|
|
upsert ADMIN_EMAIL "$ADMIN_EMAIL"
|
|
upsert ALLOW_REGISTRATION "$ALLOW_REGISTRATION"
|
|
upsert POSTGRES_USER "$POSTGRES_USER"
|
|
upsert POSTGRES_PASSWORD "$POSTGRES_PASSWORD"
|
|
upsert POSTGRES_DB "$POSTGRES_DB"
|
|
upsert POSTGRES_PORT "$POSTGRES_PORT"
|
|
upsert AI_PROVIDER_TAGS "$AI_PROVIDER_TAGS"
|
|
upsert AI_MODEL_TAGS "$AI_MODEL_TAGS"
|
|
upsert AI_PROVIDER_EMBEDDING "$AI_PROVIDER_EMBEDDING"
|
|
upsert AI_MODEL_EMBEDDING "$AI_MODEL_EMBEDDING"
|
|
upsert AI_PROVIDER_CHAT "$AI_PROVIDER_CHAT"
|
|
upsert AI_MODEL_CHAT "$AI_MODEL_CHAT"
|
|
upsert CUSTOM_OPENAI_BASE_URL "$CUSTOM_OPENAI_BASE_URL"
|
|
upsert CUSTOM_OPENAI_API_KEY "$CUSTOM_OPENAI_API_KEY"
|
|
upsert OPENAI_API_KEY "$OPENAI_API_KEY"
|
|
upsert OLLAMA_BASE_URL "$OLLAMA_BASE_URL"
|
|
upsert REDIS_HOST "redis"
|
|
upsert EMAIL_PROVIDER "$EMAIL_PROVIDER"
|
|
upsert SMTP_FROM "$SMTP_FROM"
|
|
upsert RESEND_API_KEY "$RESEND_API_KEY"
|
|
upsert SMTP_HOST "$SMTP_HOST"
|
|
upsert SMTP_PORT "$SMTP_PORT"
|
|
upsert SMTP_USER "$SMTP_USER"
|
|
upsert SMTP_PASS "$SMTP_PASS"
|
|
upsert SMTP_SECURE "$SMTP_SECURE"
|
|
upsert SMTP_IGNORE_CERT "$SMTP_IGNORE_CERT"
|
|
upsert MCP_MODE "$MCP_MODE"
|
|
upsert MCP_PORT "$MCP_PORT"
|
|
upsert WEB_SEARCH_PROVIDER "$WEB_SEARCH_PROVIDER"
|
|
upsert SEARXNG_URL "$SEARXNG_URL"
|
|
upsert BRAVE_SEARCH_API_KEY "$BRAVE_SEARCH_API_KEY"
|
|
upsert JINA_API_KEY "$JINA_API_KEY"
|
|
upsert AUTH_GOOGLE_ID "$AUTH_GOOGLE_ID"
|
|
upsert AUTH_GOOGLE_SECRET "$AUTH_GOOGLE_SECRET"
|
|
upsert SOCKET_INTERNAL_KEY "$SOCKET_INTERNAL_KEY"
|
|
upsert SOCKET_PORT "$SOCKET_PORT"
|
|
upsert SOCKET_HTTP_PORT "$SOCKET_HTTP_PORT"
|
|
upsert SOCKET_INTERNAL_URL "$SOCKET_INTERNAL_URL"
|
|
upsert NEXT_PUBLIC_SOCKET_URL "$NEXT_PUBLIC_SOCKET_URL"
|
|
upsert TELEGRAM_BOT_TOKEN "$TELEGRAM_BOT_TOKEN"
|
|
upsert TELEGRAM_CHAT_ID "$TELEGRAM_CHAT_ID"
|
|
|
|
- name: Install docker and compose inside runner
|
|
run: |
|
|
if command -v apk >/dev/null 2>&1; then
|
|
apk add --no-cache docker-cli docker-cli-compose jq curl git || true
|
|
fi
|
|
|
|
- name: Deploy on 192.168.1.190
|
|
env:
|
|
ARTIFACT_TGZ: ${{ github.workspace }}/web-artifact.tgz
|
|
EXPECTED_COMMIT: ${{ github.sha }}
|
|
run: bash /opt/memento/scripts/deploy-prod.sh
|