Update .gitea/workflows/publish.yml

.gitea/workflows/publish.yml

@@ -9,6 +9,9 @@ jobs:
   build:
     name: Run Publish Job
     runs-on: ubuntu-latest
+    container:
+      image: git.meshkee.com/packages/ubuntu:22.04
+      options: --privileged
 
     permissions:
       contents: read
@@ -44,6 +47,40 @@ jobs:
           secrets: |
             gitea_token=${{ secrets.TOKEN }}
 
+
+  deploy:
+    name: Deploy Job
+    runs-on: ubuntu-latest
+    needs: build # Recommended: ensures deploy only runs if build succeeds
+
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+      id-token: write
+      
+    steps:
+      - name: Deploy to server via native SSH
+        run: |
+          # 1. Setup SSH directory
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          
+          # 2. Add host to known_hosts to bypass prompt
+          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
+          
+          # 3. Setup the private key
+          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          
+          # 4. Connect and execute commands
+          ssh -i ~/.ssh/id_rsa ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} << 'EOF'
+            cd /apps/admin-front
+            docker pull git.meshkee.com/${{ gitea.repository }}:${{ gitea.ref_name }}
+            IMAGE=git.meshkee.com/${{ gitea.repository }}:${{ gitea.ref_name }} docker compose up -d
+          EOF
+
+
 #   deploy:
 #     name: Deploy Job
 #     runs-on: ubuntu-latest

Dockerfile

@@ -1,6 +1,7 @@
-#FROM --platform=linux/amd64 git.meshkee.com/packages/node:14 AS build-stage
+# Build Stage
-FROM --platform=linux/amd64 git.meshkee.com/cssd/cssd-front:1.0.2 AS build-stage
+#FROM docker.meshkee.com/repository/docker-hosted/node:22-alpine as build-stage
-
+#FROM --platform=linux/amd64 git.meshkee.com/cssd/cssd-front:1.0.2 AS build-stage
+FROM git.meshkee.com/packages/node:14 AS build-stage
 
 ARG REGISTRY_TOKEN
 
@@ -10,23 +11,19 @@ WORKDIR /app
 
 COPY package*.json ./
 
-RUN npm config set _auth=$REGISTRY_TOKEN
+RUN npm config set registry=https://npm.parmincloud.ir
+#
+# RUN npm config set //repo.meshkee.com/repository/:_auth=$REGISTRY_TOKEN
 
 RUN npm config set strict-ssl=false
 
-RUN npm cache clean --force
+RUN npm install
-
-RUN npm i
 
 COPY ./ .
 
 RUN npm run build
 
-# production stage
+EXPOSE 3000
-FROM nginx as production-stage
 
-RUN mkdir /app
+CMD [ "node", ".output/server/index.mjs" ]
 
-COPY --from=build-stage /app/dist /app
-
-COPY nginx.conf /etc/nginx/nginx.conf