Github Action using ssh - Revision history

AliIybar at 13:25, 5 December 2025

2025-12-05T13:25:29Z

AliIybar at 12:29, 5 December 2025

2025-12-05T12:29:08Z

AliIybar at 12:17, 5 December 2025

2025-12-05T12:17:58Z

Show changes

AliIybar at 12:02, 5 December 2025

2025-12-05T12:02:30Z

AliIybar: Created page with "Category:Github Category:ssh Category:CI/CD == Introducing github to server == First create a ssh key in the local machine (I named it as "github-deploy" when it..."

2025-12-05T12:01:40Z

Created page with "Category:Github Category:ssh Category:CI/CD == Introducing github to server == First create a ssh key in the local machine (I named it as "github-deploy" when it..."

New page

[[Category:Github]]
[[Category:ssh]]
[[Category:CI/CD]]

== Introducing github to server ==
First create a ssh key in the local machine (I named it as "github-deploy" when it asked)
ssh-keygen -t ed25519 -C "github-deploy"
'''-t ed25519''' : encryption algorithm

'''-C "github-deploy"''' : puts a comment in public key file

Copy it to server
ssh-copy-id -i ~/.ssh/github-deploy.pub bookit
'''Add public key to authorized_keys'''

Create a secret in Github repo and store private key in it.

'''OR'''

Create the key on the server and copy private key to github secrets
== Server Side ==
* install docker
* install docker-compose
* create folder for deployment

== Action ==
<pre>
services:
rabbitmq:
image: rabbitmq:3-management
container_name: rabbitmq
ports:
- "5672:5672"
- "15672:15672"
environment:
RABBITMQ_DEFAULT_USER: ${RABBITMQ_DEFAULT_USER}
RABBITMQ_DEFAULT_PASS: ${RABBITMQ_DEFAULT_PASS}
mongo:
image: mongo
restart: always
environment:
MONGO_INITDB_ROOT_USERNAME: ${MONGO_INITDB_ROOT_USERNAME}
MONGO_INITDB_ROOT_PASSWORD: ${MONGO_INITDB_ROOT_PASSWORD}
ports:
- "27017:27017"
volumes:
- ./data/mongo:/data/db
postgres:
image: postgres:18
restart: always
environment:
POSTGRES_USER: ${POSTGRES_USER}
POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
healthcheck:
test: ["CMD-SHELL", "pg_isready"]
interval: 1s
timeout: 5s
retries: 10
ports:
- "5432:5432"
volumes:
- ./data/postgres:/var/lib/postgresql/18/main
- ./sql/create_db.sql:/docker-entrypoint-initdb.d/create_db.sql
networks:
- logic_network

redis:
container_name: redis
image: redis
restart: always
ports:
- "6379:6379"
volumes:
- ./data/redis:/data/redis
keycloak:
image: quay.io/keycloak/keycloak
environment:
KC_DB: postgres
KC_DB_URL: jdbc:postgresql://postgres:5432/logic_keycloak
KC_DB_USERNAME: ${POSTGRES_USER}
KC_DB_PASSWORD: ${POSTGRES_PASSWORD}
KEYCLOAK_ADMIN: ${KEYCLOAK_ADMIN}
KEYCLOAK_ADMIN_PASSWORD: ${KEYCLOAK_ADMIN_PASSWORD}
KC_HEALTH_ENABLED: true
KC_LOG_LEVEL: info
KC_HOSTNAME_STRICT: false
KC_HTTP_ENABLED: true
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:7080/health/ready"]
interval: 15s
timeout: 2s
retries: 15
command: ["start-dev", "--http-port", "7080", "--https-port", "7443"]
ports:
- "7080:7080"
- "7443:7443"
networks:
- logic_network
depends_on:
postgres:
condition: service_healthy
networks:
logic_network:
name: logic_network
driver: bridge
</pre>

@@ Line 37: / Line 37: @@
    build:
      runs-on: ubuntu-latest
      outputs:
        RABBITMQ_DEFAULT_USER: ${{ steps.ssm.outputs.RABBITMQ_DEFAULT_USER }}
@@ Line 47: / Line 49: @@
        KEYCLOAK_ADMIN_PASSWORD: ${{ steps.ssm.outputs.KEYCLOAK_ADMIN_PASSWORD }}
      steps:
-      - name: Exit early if file not changed
-        run: |
-          FILE="docker-compose-data.yml"
-−
-          # Compare against previous commit for push
-          if git diff --name-only HEAD~1 HEAD | grep -qv "^$FILE$"; then
-            # Check if our file is among the changes
-            if ! git diff --name-only HEAD~1 HEAD | grep -q "^$FILE$"; then
-              echo "$FILE not changed — exiting workflow successfully."
-              exit 0
-            fi
-          fi
        - name: Configure AWS credentials
          uses: aws-actions/configure-aws-credentials@v4
@@ Line 157: / Line 148: @@
 Build job must output the variables to use them in deploy job. If steps are in the same job there is no need to do that.
-In the first step it checks if docker-compose-data.yml is changed. If not it exits with success
+This action only be triggered if commit message contains "database update"
 To hide echo in the logs I used

@@ Line 47: / Line 47: @@
        KEYCLOAK_ADMIN_PASSWORD: ${{ steps.ssm.outputs.KEYCLOAK_ADMIN_PASSWORD }}
      steps:
        - name: Configure AWS credentials
          uses: aws-actions/configure-aws-credentials@v4
@@ Line 144: / Line 156: @@
 === Notes about the Yaml file ===
 Build job must output the variables to use them in deploy job. If steps are in the same job there is no need to do that.
 To hide echo in the logs I used

@@ Line 12: / Line 12: @@
 Copy it to server
   ssh-copy-id -i ~/.ssh/github-deploy.pub bookit
 Create a secret in Github repo and store private key in it.
@@ Line 21: / Line 19: @@
 Create the key on the server and copy private key to github secrets
 == Server Side ==
 * install docker
 * install docker-compose