Compare commits
3 Commits
bdf9b131e7
...
3d23ceba92
| Author | SHA1 | Date | |
|---|---|---|---|
| 3d23ceba92 | |||
| 30b6dc7d46 | |||
| 7d2eb67878 |
211
.gitea-ci.yml
211
.gitea-ci.yml
@ -1,98 +1,129 @@
|
||||
stages:
|
||||
- build
|
||||
- deploy
|
||||
name: CI/CD Pipeline
|
||||
|
||||
variables:
|
||||
NODE_VERSION: "18"
|
||||
|
||||
cache:
|
||||
key: ${CI_COMMIT_REF_SLUG}
|
||||
paths:
|
||||
- node_modules/
|
||||
|
||||
before_script:
|
||||
- npm config set registry https://registry.npmmirror.com
|
||||
|
||||
build-dev:
|
||||
stage: build
|
||||
only:
|
||||
on:
|
||||
push:
|
||||
branches:
|
||||
- develop
|
||||
tags:
|
||||
- docker
|
||||
image: node:18-alpine
|
||||
script:
|
||||
- npm ci
|
||||
- npm run type-check || true
|
||||
- npm run lint || true
|
||||
- npm run build
|
||||
artifacts:
|
||||
name: "dev-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHA"
|
||||
paths:
|
||||
- dist/
|
||||
expire_in: 1 day
|
||||
- master
|
||||
pull_request:
|
||||
branches:
|
||||
- develop
|
||||
- master
|
||||
|
||||
jobs:
|
||||
build-dev:
|
||||
if: github.ref == 'refs/heads/develop'
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: "18"
|
||||
registry-url: "https://registry.npmmirror.com"
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Type check
|
||||
run: npm run type-check || true
|
||||
|
||||
- name: Lint
|
||||
run: npm run lint || true
|
||||
|
||||
- name: Build
|
||||
run: npm run build
|
||||
|
||||
- name: Upload artifacts
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: dev-dist
|
||||
path: dist/
|
||||
retention-days: 1
|
||||
|
||||
deploy-dev:
|
||||
stage: deploy
|
||||
only:
|
||||
- develop
|
||||
tags:
|
||||
- docker
|
||||
image: alpine:latest
|
||||
before_script:
|
||||
- apk add --no-cache openssh-client rsync
|
||||
script:
|
||||
- eval $(ssh-agent -s)
|
||||
- mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
||||
- ssh-keyscan -H $DEV_SERVER_IP >> ~/.ssh/known_hosts 2>/dev/null
|
||||
- echo "$DEV_SSH_PASSWORD" | sshpass ssh -o StrictHostKeyChecking=no
|
||||
root@$DEV_SERVER_IP "mkdir -p $DEV_SERVER_PATH && chmod 755
|
||||
$DEV_SERVER_PATH"
|
||||
- sshpass -p "$DEV_SSH_PASSWORD" rsync -avz --delete -e "ssh -o
|
||||
StrictHostKeyChecking=no" dist/ root@$DEV_SERVER_IP:$DEV_SERVER_PATH
|
||||
needs:
|
||||
- job: build-dev
|
||||
artifacts: true
|
||||
when: manual
|
||||
if: github.ref == 'refs/heads/develop'
|
||||
needs: build-dev
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Download artifacts
|
||||
uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: dev-dist
|
||||
path: dist/
|
||||
|
||||
- name: Deploy to dev server
|
||||
uses: appleboy/scp-action@master
|
||||
with:
|
||||
host: ${{ secrets.DEV_SERVER_IP }}
|
||||
username: root
|
||||
password: ${{ secrets.DEV_SSH_PASSWORD }}
|
||||
port: 22
|
||||
source: "dist/*"
|
||||
target: ${{ secrets.DEV_SERVER_PATH }}
|
||||
strip_components: 0
|
||||
overwrite: true
|
||||
command: |
|
||||
mkdir -p ${{ secrets.DEV_SERVER_PATH }}
|
||||
chmod 755 ${{ secrets.DEV_SERVER_PATH }}
|
||||
|
||||
build-prod:
|
||||
stage: build
|
||||
only:
|
||||
- master
|
||||
- main
|
||||
tags:
|
||||
- docker
|
||||
image: node:18-alpine
|
||||
script:
|
||||
- npm ci
|
||||
- npm run type-check || true
|
||||
- npm run lint || true
|
||||
- npm run build
|
||||
artifacts:
|
||||
name: "prod-$CI_COMMIT_REF_NAME-$CI_COMMIT_SHA"
|
||||
paths:
|
||||
- dist/
|
||||
expire_in: 7 days
|
||||
if: github.ref == 'refs/heads/master'
|
||||
runs-on: ubuntu-latest
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
|
||||
- name: Setup Node.js
|
||||
uses: actions/setup-node@v4
|
||||
with:
|
||||
node-version: "18"
|
||||
registry-url: "https://registry.npmmirror.com"
|
||||
|
||||
- name: Install dependencies
|
||||
run: npm ci
|
||||
|
||||
- name: Type check
|
||||
run: npm run type-check || true
|
||||
|
||||
- name: Lint
|
||||
run: npm run lint || true
|
||||
|
||||
- name: Build
|
||||
run: npm run build
|
||||
|
||||
- name: Upload artifacts
|
||||
uses: actions/upload-artifact@v4
|
||||
with:
|
||||
name: prod-dist
|
||||
path: dist/
|
||||
retention-days: 7
|
||||
|
||||
deploy-prod:
|
||||
stage: deploy
|
||||
only:
|
||||
- master
|
||||
- main
|
||||
tags:
|
||||
- docker
|
||||
image: alpine:latest
|
||||
before_script:
|
||||
- apk add --no-cache openssh-client rsync sshpass
|
||||
script:
|
||||
- eval $(ssh-agent -s)
|
||||
- mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
||||
- ssh-keyscan -H $PROD_SERVER_IP >> ~/.ssh/known_hosts 2>/dev/null
|
||||
- echo "$PROD_SSH_PASSWORD" | sshpass ssh -o StrictHostKeyChecking=no
|
||||
root@$PROD_SERVER_IP "mkdir -p $PROD_SERVER_PATH && chmod 755
|
||||
$PROD_SERVER_PATH"
|
||||
- sshpass -p "$PROD_SSH_PASSWORD" rsync -avz --delete -e "ssh -o
|
||||
StrictHostKeyChecking=no" dist/ root@$PROD_SERVER_IP:$PROD_SERVER_PATH
|
||||
needs:
|
||||
- job: build-prod
|
||||
artifacts: true
|
||||
when: manual
|
||||
if: github.ref == 'refs/heads/master'
|
||||
needs: build-prod
|
||||
runs-on: ubuntu-latest
|
||||
environment: production
|
||||
steps:
|
||||
- name: Download artifacts
|
||||
uses: actions/download-artifact@v4
|
||||
with:
|
||||
name: prod-dist
|
||||
path: dist/
|
||||
|
||||
- name: Deploy to prod server
|
||||
uses: appleboy/scp-action@master
|
||||
with:
|
||||
host: ${{ secrets.PROD_SERVER_IP }}
|
||||
username: root
|
||||
password: ${{ secrets.PROD_SSH_PASSWORD }}
|
||||
port: 22
|
||||
source: "dist/*"
|
||||
target: ${{ secrets.PROD_SERVER_PATH }}
|
||||
strip_components: 0
|
||||
overwrite: true
|
||||
command: |
|
||||
mkdir -p ${{ secrets.PROD_SERVER_PATH }}
|
||||
chmod 755 ${{ secrets.PROD_SERVER_PATH }}
|
||||
|
||||
113
CICD_SETUP.md
113
CICD_SETUP.md
@ -1,16 +1,47 @@
|
||||
# 宝塔面板 + Gitea CI/CD 配置指南
|
||||
# Gitea Actions CI/CD 配置指南
|
||||
|
||||
## 整体流程
|
||||
|
||||
```
|
||||
代码推送 → Gitea CI/CD自动构建 → SSH上传到宝塔服务器 → 完成!
|
||||
代码推送 → Gitea Actions自动构建 → SCP上传到宝塔服务器 → 完成!
|
||||
```
|
||||
|
||||
## Gitea Secrets配置
|
||||
|
||||
在仓库 **Settings → Secrets** 中添加以下变量:
|
||||
|
||||
### 开发服务器
|
||||
|
||||
| 变量名 | 值示例 | 说明 |
|
||||
| ------------------ | -------------------------------------------- | ------------- |
|
||||
| `DEV_SERVER_IP` | `192.168.1.100` | 开发服务器IP |
|
||||
| `DEV_SERVER_PATH` | `/www/wwwroot/test1.stnav.com/public/parten` | 部署路径 |
|
||||
| `DEV_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
|
||||
|
||||
### 生产服务器
|
||||
|
||||
| 变量名 | 值示例 | 说明 |
|
||||
| ------------------- | ----------------------------------------------- | ------------- |
|
||||
| `PROD_SERVER_IP` | `192.168.1.101` | 生产服务器IP |
|
||||
| `PROD_SERVER_PATH` | `/www/wwwroot/default/chaz_admin/public/parten` | 部署路径 |
|
||||
| `PROD_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
|
||||
|
||||
## Gitea Actions Runner配置
|
||||
|
||||
确保你的Gitea Actions Runner标签包含 `ubuntu-latest`:
|
||||
|
||||
1. 登录Gitea管理员账户
|
||||
2. 进入 **管理后台 → Actions → Runner**
|
||||
3. 编辑Runner,添加标签:
|
||||
- `ubuntu-latest`
|
||||
- `ubuntu-24.04`
|
||||
- `ubuntu-22.04`
|
||||
|
||||
## 宝塔面板准备工作
|
||||
|
||||
### 1. 确认SSH权限
|
||||
|
||||
在宝塔面板中确认:
|
||||
在宝塔面板中确认SSH信息:
|
||||
- **面板设置 → 面板账户** 中的SSH信息
|
||||
- 或者在**安全 → SSH管理**中查看
|
||||
|
||||
@ -28,29 +59,9 @@ mkdir -p /www/wwwroot/default/chaz_admin/public/parten
|
||||
chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
```
|
||||
|
||||
## Gitea Secrets配置
|
||||
|
||||
在仓库 **Settings → Secrets** 中添加以下变量:
|
||||
|
||||
### 开发服务器
|
||||
|
||||
| 变量名 | 值示例 | 说明 |
|
||||
|--------|--------|------|
|
||||
| `DEV_SERVER_IP` | `192.168.1.100` | 开发服务器IP |
|
||||
| `DEV_SERVER_PATH` | `/www/wwwroot/test1.stnav.com/public/parten` | 部署路径 |
|
||||
| `DEV_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
|
||||
|
||||
### 生产服务器
|
||||
|
||||
| 变量名 | 值示例 | 说明 |
|
||||
|--------|--------|------|
|
||||
| `PROD_SERVER_IP` | `192.168.1.101` | 生产服务器IP |
|
||||
| `PROD_SERVER_PATH` | `/www/wwwroot/default/chaz_admin/public/parten` | 部署路径 |
|
||||
| `PROD_SSH_PASSWORD` | `你的SSH密码` | 服务器SSH密码 |
|
||||
|
||||
## 宝塔防火墙配置
|
||||
|
||||
确保服务器的SSH端口(默认22)对Gitea Runner开放:
|
||||
确保服务器的SSH端口(默认22)开放:
|
||||
|
||||
1. 宝塔面板 → 安全 → 防火墙
|
||||
2. 放行22端口(或你自定义的SSH端口)
|
||||
@ -67,14 +78,9 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
git push origin develop
|
||||
```
|
||||
|
||||
2. **自动构建** - Gitea自动触发 `build-dev`
|
||||
2. **自动构建和部署** - Gitea Actions自动执行全部流程
|
||||
|
||||
3. **手动部署**
|
||||
- 进入仓库 **CI/CD → Pipelines**
|
||||
- 找到 develop 分支的 Pipeline
|
||||
- 点击 `deploy-dev` 的播放按钮 ▶️
|
||||
|
||||
4. **验证** - 访问 `https://test1.stnav.com/parten`
|
||||
3. **验证** - 访问 `https://test1.stnav.com/parten`
|
||||
|
||||
### 生产环境(master分支)
|
||||
|
||||
@ -85,14 +91,9 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
git push origin master
|
||||
```
|
||||
|
||||
2. **自动构建** - Gitea自动触发 `build-prod`
|
||||
2. **自动构建和部署** - Gitea Actions自动执行全部流程
|
||||
|
||||
3. **手动部署**
|
||||
- 进入仓库 **CI/CD → Pipelines**
|
||||
- 找到 master 分支的 Pipeline
|
||||
- 点击 `deploy-prod` 的播放按钮 ▶️
|
||||
|
||||
4. **验证** - 访问生产环境地址
|
||||
3. **验证** - 访问生产环境地址
|
||||
|
||||
## 宝塔站点配置(可选)
|
||||
|
||||
@ -107,7 +108,15 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
|
||||
## 常见问题
|
||||
|
||||
### 1. SSH连接失败
|
||||
### 1. Actions不执行
|
||||
```
|
||||
检查:
|
||||
- Gitea Actions是否启用:管理后台 → Actions → 设置
|
||||
- Runner是否在线
|
||||
- Runner标签是否包含 ubuntu-latest
|
||||
```
|
||||
|
||||
### 2. SSH连接失败
|
||||
```
|
||||
检查:
|
||||
- 服务器IP是否正确
|
||||
@ -116,7 +125,7 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
- 宝塔SSH是否开启
|
||||
```
|
||||
|
||||
### 2. 权限被拒绝
|
||||
### 3. 权限被拒绝
|
||||
```
|
||||
解决:
|
||||
- 确认目标目录存在
|
||||
@ -124,26 +133,18 @@ chmod -R 755 /www/wwwroot/default/chaz_admin/public/parten
|
||||
- 确认SSH用户有写入权限
|
||||
```
|
||||
|
||||
### 3. 构建成功但部署失败
|
||||
```
|
||||
检查:
|
||||
- Secrets中的密码是否正确
|
||||
- 部署路径是否正确
|
||||
- 服务器SSH服务是否运行
|
||||
```
|
||||
|
||||
## 安全建议
|
||||
|
||||
⚠️ **重要提醒:**
|
||||
- 生产服务器的密码建议定期更换
|
||||
- 考虑使用Gitea的受限Runner来提高安全性
|
||||
- 监控CI/CD日志,及时发现异常
|
||||
- 考虑使用受限的SSH用户
|
||||
- 监控Actions日志,及时发现异常
|
||||
|
||||
## 优势
|
||||
|
||||
使用宝塔面板的优势:
|
||||
- ✅ 可视化管理服务器
|
||||
- ✅ 方便查看日志和文件
|
||||
- ✅ 内置防火墙和安全防护
|
||||
- ✅ 简化SSL证书配置
|
||||
- ✅ 图形化Nginx/Apache配置
|
||||
使用Gitea Actions的优势:
|
||||
- ✅ 语法与GitHub Actions相同,易于理解
|
||||
- ✅ 使用ubuntu系统,兼容性好
|
||||
- ✅ 内置artifacts管理
|
||||
- ✅ 支持并行任务
|
||||
- ✅ 宝塔面板可视化服务器管理
|
||||
|
||||
@ -3,7 +3,7 @@
|
||||
<div class="lg:flex">
|
||||
<el-card class="!border-none mb-4 lg:mr-4 lg:w-[350px]" shadow="never">
|
||||
<template #header>
|
||||
<span class="card-title">版本信息</span>
|
||||
<span class="card-title">版本信息1234</span>
|
||||
</template>
|
||||
<div>
|
||||
<div class="flex leading-9">
|
||||
|
||||
Reference in New Issue
Block a user