release

.gitea/workflows/morskaRelease.yml

@@ -1,7 +1,7 @@
 name: Release Morska (latest successful build)
 
 on:
-  workflow_dispatch: {}   # ręczny trigger
+  workflow_dispatch: {}
 
 env:
   DEPLOY_HOST: "bim-it.pl"
@@ -14,28 +14,28 @@ env:
 jobs:
   release:
     runs-on: ubuntu-latest
-
     steps:
       - name: Checkout (for completeness)
         uses: https://github.com/actions/checkout@v4
 
       - name: Install tools
         run: |
+          set -euo pipefail
           apt-get update -y
           apt-get install -y jq unzip zip openssh-client
 
       - name: Resolve repo/env
         id: repo
         env:
-          GITEA_SERVER_URL: ${{ github.server_url }}   # np. https://code.bim-it.pl
           GITHUB_REPOSITORY: ${{ github.repository }}  # owner/repo
+          API_BASE: ${{ env.API_BASE }}
         run: |
           set -euo pipefail
           OWNER="${GITHUB_REPOSITORY%%/*}"
           REPO="${GITHUB_REPOSITORY##*/}"
           echo "owner=$OWNER" >> $GITHUB_OUTPUT
           echo "repo=$REPO"   >> $GITHUB_OUTPUT
-          echo "api=${GITEA_SERVER_URL%/}/api/v1" >> $GITHUB_OUTPUT
+          echo "api=$API_BASE" >> $GITHUB_OUTPUT
 
       - name: Probe API & auth
         env:
@@ -56,14 +56,14 @@ jobs:
           OWNER: ${{ steps.repo.outputs.owner }}
           REPO:  ${{ steps.repo.outputs.repo }}
           TOKEN: ${{ secrets.GITEATOKEN }}
+          BUILD_PATH: ${{ env.BUILD_WORKFLOW_PATH }}
         run: |
           set -euo pipefail
           URL="$API/repos/$OWNER/$REPO/actions/runs?status=success&branch=main&per_page=20"
           echo "GET $URL"
           RESP="$(curl -sfSL -H "Authorization: token $TOKEN" "$URL")"
           echo "$RESP" | jq -e '.workflow_runs' >/dev/null
-      
+          RUN_ID="$(echo "$RESP" | jq -r --arg p "$BUILD_PATH" '
-      RUN_ID="$(echo "$RESP" | jq -r '
             .workflow_runs
             | map(select(
                 (.head_branch=="main")
@@ -71,7 +71,7 @@ jobs:
                 and (.conclusion=="success")
                 and (
                   (.path? // .workflow_path? // .workflow?.path? // "") 
-              | test("(\\.gitea|\\.github)/workflows/build\\.yml$")
+                  | test($p + "$")
                 )
               ))
             | sort_by(.run_number) | reverse | .[0].id // empty
@@ -83,7 +83,7 @@ jobs:
           API:   ${{ steps.repo.outputs.api }}
           OWNER: ${{ steps.repo.outputs.owner }}
           REPO:  ${{ steps.repo.outputs.repo }}
-          TOKEN: ${{ secrets.GITEA_TOKEN }}
+          TOKEN: ${{ secrets.GITEATOKEN }}
           RUN_ID: ${{ steps.pick.outputs.run_id }}
         run: |
           set -euo pipefail
@@ -111,11 +111,13 @@ jobs:
 
       - name: Prepare known_hosts
         run: |
+          set -euo pipefail
           mkdir -p ~/.ssh
           ssh-keyscan -H "${{ env.DEPLOY_HOST }}" >> ~/.ssh/known_hosts 2>/dev/null || true
 
       - name: Send artifacts to PROD
         run: |
+          set -euo pipefail
           scp -i "${{ env.SSH_KEYFILE }}" -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes \
             ./release/DiunaBI-Morska-Frontend.zip \
             "${{ env.DEPLOY_USER }}@${{ env.DEPLOY_HOST }}:${{ env.DEPLOY_PATH }}"
@@ -125,6 +127,7 @@ jobs:
 
       - name: Run remote deploy script
         run: |
+          set -euo pipefail
           ssh -i "${{ env.SSH_KEYFILE }}" -o IdentitiesOnly=yes -o StrictHostKeyChecking=yes \
             "${{ env.DEPLOY_USER }}@${{ env.DEPLOY_HOST }}" << 'EOF'
               ./deployment/DiunaBI-Morska.Release.sh