Update .gitea/workflows/publish.yml

.gitea/workflows/publish.yml

@@ -9,6 +9,9 @@ jobs:
   build:
     name: Run Publish Job
     runs-on: ubuntu-latest
+    container:
+      image: git.meshkee.com/packages/ubuntu:22.04
+      options: --privileged
 
     permissions:
       contents: read
@@ -44,6 +47,40 @@ jobs:
           secrets: |
             gitea_token=${{ secrets.TOKEN }}
 
+
+  deploy:
+    name: Deploy Job
+    runs-on: ubuntu-latest
+    needs: build # Recommended: ensures deploy only runs if build succeeds
+
+    permissions:
+      contents: read
+      security-events: write
+      actions: read
+      id-token: write
+      
+    steps:
+      - name: Deploy to server via native SSH
+        run: |
+          # 1. Setup SSH directory
+          mkdir -p ~/.ssh
+          chmod 700 ~/.ssh
+          
+          # 2. Add host to known_hosts to bypass prompt
+          ssh-keyscan -H ${{ secrets.SSH_HOST }} >> ~/.ssh/known_hosts
+          
+          # 3. Setup the private key
+          echo "${{ secrets.SSH_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          
+          # 4. Connect and execute commands
+          ssh -i ~/.ssh/id_rsa ${{ secrets.SSH_USER }}@${{ secrets.SSH_HOST }} << 'EOF'
+            cd /apps/admin-front
+            docker pull git.meshkee.com/${{ gitea.repository }}:${{ gitea.ref_name }}
+            IMAGE=git.meshkee.com/${{ gitea.repository }}:${{ gitea.ref_name }} docker compose up -d
+          EOF
+
+
 #   deploy:
 #     name: Deploy Job
 #     runs-on: ubuntu-latest