From 142f2a28e717d4fcf9a63fabf79a79ef98199a84 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Zieli=C5=84ski?= Date: Mon, 15 Sep 2025 21:15:33 +0200 Subject: [PATCH] wip: release --- .gitea/workflows/morskaRelease.yml | 13 ++----------- 1 file changed, 2 insertions(+), 11 deletions(-) diff --git a/.gitea/workflows/morskaRelease.yml b/.gitea/workflows/morskaRelease.yml index 66291e3..1df84d2 100644 --- a/.gitea/workflows/morskaRelease.yml +++ b/.gitea/workflows/morskaRelease.yml @@ -10,9 +10,7 @@ jobs: GITEA_BASE_URL: https://code.bim-it.pl OWNER: mz REPO: DiunaBI - # Comma-separated artifact names that must exist REQUIRED_ARTIFACTS: frontend,webapi - # How many recent successful runs to scan SCAN_LIMIT: "100" steps: @@ -64,7 +62,6 @@ jobs: ls -laR artifacts/webapi || true echo "::endgroup::" - # 3) Package artifacts as ZIPs for transfer - name: Package artifacts as ZIPs run: | mkdir -p build @@ -73,7 +70,7 @@ jobs: ls -la build - name: Debug SSH key env: - SSH_PRIVATE_KEY: ${{ secrets.BIMIT_SSH_KEY }} + SSH_PRIVATE_KEY: ${{ secrets.GITEA_RUNNER_SSH_KEY }} run: | echo "== PoczÄ…tek klucza ==" echo "$SSH_PRIVATE_KEY" | head -n 5 @@ -84,31 +81,25 @@ jobs: echo "== ssh-keygen sprawdzenie formatu ==" printf "%s" "$SSH_PRIVATE_KEY" > private_key ssh-keygen -lf private_key || true - # 4) Upload ZIPs to remote server via SSH (using secret key) - name: Upload artifacts to remote server env: - SSH_PRIVATE_KEY: ${{ secrets.BIMIT_SSH_KEY }} + SSH_PRIVATE_KEY: ${{ secrets.GITEA_RUNNER_SSH_KEY }} SSH_USER: mz SSH_HOST: bim-it.pl REMOTE_DIR: deployment run: | set -euo pipefail - # Prepare key umask 077 echo "$SSH_PRIVATE_KEY" > private_key chmod 600 private_key - # Preload known_hosts (safer than StrictHostKeyChecking=no) mkdir -p ~/.ssh ssh-keyscan -H "$SSH_HOST" >> ~/.ssh/known_hosts - # Ensure remote dir exists ssh -i private_key "$SSH_USER@$SSH_HOST" "mkdir -p ~/$REMOTE_DIR" - # Upload files scp -i private_key build/DiunaBI-Morska-Frontend.zip "$SSH_USER@$SSH_HOST:~/$REMOTE_DIR/" scp -i private_key build/DiunaBI-Morska-WebApi.zip "$SSH_USER@$SSH_HOST:~/$REMOTE_DIR/" - # Cleanup shred -u private_key \ No newline at end of file