ed27dcfc14
Some checks failed
deploy / deploy (push) Failing after 14s
- Главная: hero, адрес Люблинская 100 (Аквапарк ФЭНТАЗИ), 4 кликабельных tel:, карта Яндекса - /privacy: политика 152-ФЗ + ConsentRevoke (отозвать/сбросить) - Аналитика перенесена 1:1 с WP: Яндекс.Метрика 47169531 (Webvisor) + GA4 GT-WRF7ZZ8 - Скрипты в type=text/plain, активируются после согласия (pit-consent в localStorage+cookie) - robots.txt с явным Allow для GPTBot/ClaudeBot/PerplexityBot/Google-Extended/CCBot - llms.txt + ai.txt (spawning.ai стандарт) - IndexNow ключ 901a779d62ca4702ad810c863b45e1f7 - JSON-LD AutoPartsStore с адресом и 4 телефонами - nginx:1.29-alpine runtime, контейнер на :4147 - Gitea Actions deploy.yml + Trivy scan + IndexNow ping
76 lines
2.3 KiB
YAML
76 lines
2.3 KiB
YAML
name: deploy
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
deploy:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Install SSH client
|
|
run: |
|
|
apt-get update -qq
|
|
apt-get install -y --no-install-recommends openssh-client
|
|
|
|
- name: Setup SSH
|
|
run: |
|
|
mkdir -p ~/.ssh && chmod 700 ~/.ssh
|
|
printf '%s\n' "${{ secrets.SSH_DEPLOY_KEY }}" > ~/.ssh/id_deploy
|
|
chmod 600 ~/.ssh/id_deploy
|
|
printf '%s\n' "${{ secrets.SSH_KNOWN_HOSTS }}" > ~/.ssh/known_hosts
|
|
chmod 644 ~/.ssh/known_hosts
|
|
|
|
- name: Deploy + Trivy scan to web.hhivp.com
|
|
run: |
|
|
ssh -i ~/.ssh/id_deploy striker@web.hhivp.com bash -s <<'REMOTE'
|
|
set -euo pipefail
|
|
REPO_URL="ssh://git@git.striker.su:2222/striker/pitstopavto-su-v2.git"
|
|
DEPLOY_PATH="/opt/docker/sites/pitstopavto-su-v2"
|
|
HEALTH_URL="http://127.0.0.1:4147/"
|
|
|
|
if [ ! -d "$DEPLOY_PATH/.git" ]; then
|
|
mkdir -p "$DEPLOY_PATH"
|
|
git clone --branch main "$REPO_URL" "$DEPLOY_PATH"
|
|
else
|
|
cd "$DEPLOY_PATH"
|
|
git remote set-url origin "$REPO_URL"
|
|
git fetch origin main
|
|
git reset --hard origin/main
|
|
fi
|
|
|
|
cd "$DEPLOY_PATH"
|
|
docker compose build
|
|
|
|
echo "=== Trivy scan: pitstopavto-su-v2:latest ==="
|
|
docker run --rm \
|
|
-v /var/run/docker.sock:/var/run/docker.sock \
|
|
-v /tmp/trivy-cache:/root/.cache/ \
|
|
ghcr.io/aquasecurity/trivy:latest image \
|
|
--severity HIGH,CRITICAL \
|
|
--ignore-unfixed \
|
|
--no-progress \
|
|
--exit-code 0 \
|
|
--timeout 5m \
|
|
pitstopavto-su-v2:latest || true
|
|
echo "=== Trivy scan done ==="
|
|
|
|
docker compose up -d
|
|
sleep 5
|
|
docker compose ps
|
|
curl -fsS -o /dev/null -w "HEALTH HTTP %{http_code}\n" "$HEALTH_URL"
|
|
docker image prune -af --filter "until=168h" >/dev/null 2>&1 || true
|
|
REMOTE
|
|
|
|
- name: Setup Node.js for IndexNow
|
|
uses: actions/setup-node@v4
|
|
with:
|
|
node-version: '22'
|
|
|
|
- name: Notify IndexNow
|
|
run: npm run indexnow || true
|