Compare commits

...

3 Commits

Author SHA1 Message Date
3d23ceba92 更新CICD配置 2026-04-24 15:04:00 +08:00
30b6dc7d46 测试CICD 2026-04-24 15:00:08 +08:00
7d2eb67878 测试CICD 2026-04-24 14:54:30 +08:00
3 changed files with 180 additions and 148 deletions

View File

@ -1,98 +1,129 @@
stages: name: CI/CD Pipeline
- build
- deploy
variables: on:
NODE_VERSION: "18" push:
branches:
cache:
key: ${CI_COMMIT_REF_SLUG}
paths:
- node_modules/
before_script:
- npm config set registry https://registry.npmmirror.com
build-dev:
stage: build
only:
- develop - develop
tags: - master
- docker pull_request:
image: node:18-alpine branches:
script: - develop
- npm ci - master
- npm run type-check || true
- npm run lint || true jobs:
- npm run build build-dev:
artifacts: if: github.ref == 'refs/heads/develop'
name: "dev-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHA" runs-on: ubuntu-latest
paths: steps:
- dist/ - name: Checkout code
expire_in: 1 day uses: actions/checkout@v4
- name: Setup Node.js
uses: actions/setup-node@v4
with:
node-version: "18"
registry-url: "https://registry.npmmirror.com"
- name: Install dependencies
run: npm ci
- name: Type check
run: npm run type-check || true
- name: Lint
run: npm run lint || true
- name: Build
run: npm run build
- name: Upload artifacts
uses: actions/upload-artifact@v4
with:
name: dev-dist
path: dist/
retention-days: 1
deploy-dev: deploy-dev:
stage: deploy if: github.ref == 'refs/heads/develop'
only: needs: build-dev
- develop runs-on: ubuntu-latest
tags: steps:
- docker - name: Download artifacts
image: alpine:latest uses: actions/download-artifact@v4
before_script: with:
- apk add --no-cache openssh-client rsync name: dev-dist
script: path: dist/
- eval $(ssh-agent -s)
- mkdir -p ~/.ssh && chmod 700 ~/.ssh - name: Deploy to dev server
- ssh-keyscan -H $DEV_SERVER_IP >> ~/.ssh/known_hosts 2>/dev/null uses: appleboy/scp-action@master
- echo "$DEV_SSH_PASSWORD" | sshpass ssh -o StrictHostKeyChecking=no with:
root@$DEV_SERVER_IP "mkdir -p $DEV_SERVER_PATH && chmod 755 host: ${{ secrets.DEV_SERVER_IP }}
$DEV_SERVER_PATH" username: root
- sshpass -p "$DEV_SSH_PASSWORD" rsync -avz --delete -e "ssh -o password: ${{ secrets.DEV_SSH_PASSWORD }}
StrictHostKeyChecking=no" dist/ root@$DEV_SERVER_IP:$DEV_SERVER_PATH port: 22
needs: source: "dist/*"
- job: build-dev target: ${{ secrets.DEV_SERVER_PATH }}
artifacts: true strip_components: 0
when: manual overwrite: true
command: |
mkdir -p ${{ secrets.DEV_SERVER_PATH }}
chmod 755 ${{ secrets.DEV_SERVER_PATH }}
build-prod: build-prod:
stage: build if: github.ref == 'refs/heads/master'
only: runs-on: ubuntu-latest
- master steps:
- main - name: Checkout code
tags: uses: actions/checkout@v4
- docker
image: node:18-alpine - name: Setup Node.js
script: uses: actions/setup-node@v4
- npm ci with:
- npm run type-check || true node-version: "18"
- npm run lint || true registry-url: "https://registry.npmmirror.com"
- npm run build
artifacts: - name: Install dependencies
name: "prod-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHA" run: npm ci
paths:
- dist/ - name: Type check
expire_in: 7 days run: npm run type-check || true
- name: Lint
run: npm run lint || true
- name: Build
run: npm run build
- name: Upload artifacts
uses: actions/upload-artifact@v4
with:
name: prod-dist
path: dist/
retention-days: 7
deploy-prod: deploy-prod:
stage: deploy if: github.ref == 'refs/heads/master'
only: needs: build-prod
- master runs-on: ubuntu-latest
- main environment: production
tags: steps:
- docker - name: Download artifacts
image: alpine:latest uses: actions/download-artifact@v4
before_script: with:
- apk add --no-cache openssh-client rsync sshpass name: prod-dist
script: path: dist/
- eval $(ssh-agent -s)
- mkdir -p ~/.ssh && chmod 700 ~/.ssh - name: Deploy to prod server
- ssh-keyscan -H $PROD_SERVER_IP >> ~/.ssh/known_hosts 2>/dev/null uses: appleboy/scp-action@master
- echo "$PROD_SSH_PASSWORD" | sshpass ssh -o StrictHostKeyChecking=no with:
root@$PROD_SERVER_IP "mkdir -p $PROD_SERVER_PATH && chmod 755 host: ${{ secrets.PROD_SERVER_IP }}
$PROD_SERVER_PATH" username: root
- sshpass -p "$PROD_SSH_PASSWORD" rsync -avz --delete -e "ssh -o password: ${{ secrets.PROD_SSH_PASSWORD }}
StrictHostKeyChecking=no" dist/ root@$PROD_SERVER_IP:$PROD_SERVER_PATH port: 22
needs: source: "dist/*"
- job: build-prod target: ${{ secrets.PROD_SERVER_PATH }}
artifacts: true strip_components: 0
when: manual overwrite: true
command: |
mkdir -p ${{ secrets.PROD_SERVER_PATH }}
chmod 755 ${{ secrets.PROD_SERVER_PATH }}

View File

@ -1,16 +1,47 @@
# 宝塔面板 + Gitea CI/CD 配置指南 # Gitea Actions CI/CD 配置指南
## 整体流程 ## 整体流程
``` ```
代码推送 → Gitea CI/CD自动构建 → SSH上传到宝塔服务器 → 完成! 代码推送 → Gitea Actions自动构建 → SCP上传到宝塔服务器 → 完成!
``` ```
## Gitea Secrets配置
在仓库 **Settings → Secrets** 中添加以下变量:
### 开发服务器
| 变量名 | 值示例 | 说明 |
| ------------------ | -------------------------------------------- | ------------- |
| `DEV_SERVER_IP` | `192.168.1.100` | 开发服务器IP |
| `DEV_SERVER_PATH` | `/www/wwwroot/test1.stnav.com/public/parten` | 部署路径 |
| `DEV_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
### 生产服务器
| 变量名 | 值示例 | 说明 |
| ------------------- | ----------------------------------------------- | ------------- |
| `PROD_SERVER_IP` | `192.168.1.101` | 生产服务器IP |
| `PROD_SERVER_PATH` | `/www/wwwroot/default/chaz_admin/public/parten` | 部署路径 |
| `PROD_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
## Gitea Actions Runner配置
确保你的Gitea Actions Runner标签包含 `ubuntu-latest`
1. 登录Gitea管理员账户
2. 进入 **管理后台 → Actions → Runner**
3. 编辑Runner添加标签
- `ubuntu-latest`
- `ubuntu-24.04`
- `ubuntu-22.04`
## 宝塔面板准备工作 ## 宝塔面板准备工作
### 1. 确认SSH权限 ### 1. 确认SSH权限
在宝塔面板中确认: 在宝塔面板中确认SSH信息
- **面板设置 → 面板账户** 中的SSH信息 - **面板设置 → 面板账户** 中的SSH信息
- 或者在**安全 → SSH管理**中查看 - 或者在**安全 → SSH管理**中查看
@ -28,29 +59,9 @@ mkdir -p /www/wwwroot/default/chaz_admin/public/parten
chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
``` ```
## Gitea Secrets配置
在仓库 **Settings → Secrets** 中添加以下变量:
### 开发服务器
| 变量名 | 值示例 | 说明 |
|--------|--------|------|
| `DEV_SERVER_IP` | `192.168.1.100` | 开发服务器IP |
| `DEV_SERVER_PATH` | `/www/wwwroot/test1.stnav.com/public/parten` | 部署路径 |
| `DEV_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
### 生产服务器
| 变量名 | 值示例 | 说明 |
|--------|--------|------|
| `PROD_SERVER_IP` | `192.168.1.101` | 生产服务器IP |
| `PROD_SERVER_PATH` | `/www/wwwroot/default/chaz_admin/public/parten` | 部署路径 |
| `PROD_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
## 宝塔防火墙配置 ## 宝塔防火墙配置
确保服务器的SSH端口默认22对Gitea Runner开放: 确保服务器的SSH端口默认22开放
1. 宝塔面板 → 安全 → 防火墙 1. 宝塔面板 → 安全 → 防火墙
2. 放行22端口或你自定义的SSH端口 2. 放行22端口或你自定义的SSH端口
@ -67,14 +78,9 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
git push origin develop git push origin develop
``` ```
2. **自动构建** - Gitea自动触发 `build-dev` 2. **自动构建和部署** - Gitea Actions自动执行全部流程
3. **手动部署** 3. **验证** - 访问 `https://test1.stnav.com/parten`
- 进入仓库 **CI/CD → Pipelines**
- 找到 develop 分支的 Pipeline
- 点击 `deploy-dev` 的播放按钮 ▶️
4. **验证** - 访问 `https://test1.stnav.com/parten`
### 生产环境master分支 ### 生产环境master分支
@ -85,14 +91,9 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
git push origin master git push origin master
``` ```
2. **自动构建** - Gitea自动触发 `build-prod` 2. **自动构建和部署** - Gitea Actions自动执行全部流程
3. **手动部署** 3. **验证** - 访问生产环境地址
- 进入仓库 **CI/CD → Pipelines**
- 找到 master 分支的 Pipeline
- 点击 `deploy-prod` 的播放按钮 ▶️
4. **验证** - 访问生产环境地址
## 宝塔站点配置(可选) ## 宝塔站点配置(可选)
@ -107,7 +108,15 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
## 常见问题 ## 常见问题
### 1. SSH连接失败 ### 1. Actions不执行
```
检查:
- Gitea Actions是否启用管理后台 → Actions → 设置
- Runner是否在线
- Runner标签是否包含 ubuntu-latest
```
### 2. SSH连接失败
``` ```
检查: 检查:
- 服务器IP是否正确 - 服务器IP是否正确
@ -116,7 +125,7 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
- 宝塔SSH是否开启 - 宝塔SSH是否开启
``` ```
### 2. 权限被拒绝 ### 3. 权限被拒绝
``` ```
解决: 解决:
- 确认目标目录存在 - 确认目标目录存在
@ -124,26 +133,18 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
- 确认SSH用户有写入权限 - 确认SSH用户有写入权限
``` ```
### 3. 构建成功但部署失败
```
检查:
- Secrets中的密码是否正确
- 部署路径是否正确
- 服务器SSH服务是否运行
```
## 安全建议 ## 安全建议
⚠️ **重要提醒:** ⚠️ **重要提醒:**
- 生产服务器的密码建议定期更换 - 生产服务器的密码建议定期更换
- 考虑使用Gitea的受限Runner来提高安全性 - 考虑使用受限的SSH用户
- 监控CI/CD日志,及时发现异常 - 监控Actions日志,及时发现异常
## 优势 ## 优势
使用宝塔面板的优势: 使用Gitea Actions的优势:
-可视化管理服务器 -语法与GitHub Actions相同易于理解
-方便查看日志和文件 -使用ubuntu系统兼容性好
- ✅ 内置防火墙和安全防护 - ✅ 内置artifacts管理
-简化SSL证书配置 -支持并行任务
-图形化Nginx/Apache配置 -宝塔面板可视化服务器管理

View File

@ -3,7 +3,7 @@
<div class="lg:flex"> <div class="lg:flex">
<el-card class="!border-none mb-4 lg:mr-4 lg:w-[350px]" shadow="never"> <el-card class="!border-none mb-4 lg:mr-4 lg:w-[350px]" shadow="never">
<template #header> <template #header>
<span class="card-title">版本信息</span> <span class="card-title">版本信息1234</span>
</template> </template>
<div> <div>
<div class="flex leading-9"> <div class="flex leading-9">