From 2f3d89b3d69e6e4869e5db109d3ffd33f6aff1ec Mon Sep 17 00:00:00 2001 From: L HEREEC Kevin INNOV/PTFM Date: Mon, 13 Jul 2026 12:43:01 +0200 Subject: [PATCH] ci: simplify deploy step, remove redundant ssh-keyscan and docker login on NAS --- .gitea/workflows/build.yml | 20 ++++++-------------- 1 file changed, 6 insertions(+), 14 deletions(-) diff --git a/.gitea/workflows/build.yml b/.gitea/workflows/build.yml index 31b0203..7b59d7d 100644 --- a/.gitea/workflows/build.yml +++ b/.gitea/workflows/build.yml @@ -32,8 +32,7 @@ jobs: run: git clone --depth=1 http://x-access-token:${{ github.token }}@192.168.1.39:3000/${{ github.repository }}.git . - name: Login to Gitea Container Registry - run: | - echo "${{ secrets.TOKEN }}" | docker login http://192.168.1.39:3000 -u "${{ secrets.USERNAME }}" --password-stdin + run: echo "${{ secrets.TOKEN }}" | docker login http://192.168.1.39:3000 -u "${{ secrets.USERNAME }}" --password-stdin - name: Build and push Docker image run: | @@ -54,18 +53,12 @@ jobs: run: | apk add --no-cache openssh-client - # Clé montée directement dans le runner via volume Docker - chmod 600 /root/.ssh/id_ed25519 - ssh-keyscan -H 192.168.1.39 >> /root/.ssh/known_hosts + SSH="ssh -o StrictHostKeyChecking=no Stude12@192.168.1.39" - SSH="ssh -i /root/.ssh/id_ed25519 -o StrictHostKeyChecking=no Stude12@192.168.1.39" + # Copier docker-compose.prod.yml + cat docker-compose.prod.yml | $SSH "mkdir -p /volume1/docker/adam-acs && cat > /volume1/docker/adam-acs/docker-compose.prod.yml" - # Copier docker-compose.prod.yml sur le NAS - cat docker-compose.prod.yml | $SSH \ - "mkdir -p /volume1/docker/adam-acs && cat > /volume1/docker/adam-acs/docker-compose.prod.yml" - - # Créer le fichier .env sur le NAS à partir des secrets - # MongoDB mutualisé : connexion hard-codée dans docker-compose.prod.yml (admin/admin_password) + # Créer le .env sur le NAS $SSH "cat > /volume1/docker/adam-acs/.env" <