Merge pull request #6 from nwplus/automate-deployments

Inject Server Secret Files from Github Secrets
nwplus · Jul 19, 2024 · eed2c97 · eed2c97
2 parents 713d1c0 + 5aaf81b
commit eed2c97
Show file tree

Hide file tree

Showing 2 changed files with 27 additions and 0 deletions.
diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml
@@ -53,9 +53,18 @@ jobs:
     - name: Copy systemd service file
       run: sudo cp dinubot.service /etc/systemd/system/dinubot.service
 
+    - name: Create .env file from secret
+      run: echo "${{ secrets.ENV_FILE }}" > .env
+
+    - name: Create service_account.json file from secret
+      run: echo "${{ secrets.SERVICE_ACCOUNT_JSON }}" > service_account.json
+
     - name: Reload systemd daemon
       run: sudo systemctl daemon-reload
 
+    - name: Stop existing Dinubot service
+      run: sudo systemctl stop dinubot
+
     - name: Enable and start Dinubot service
       run: |
         sudo systemctl enable dinubot

diff --git a/.github/workflows/refresh_secrets.yml b/.github/workflows/refresh_secrets.yml
@@ -0,0 +1,18 @@
+name: Refresh Secrets on Server
+
+on:
+  workflow_dispatch:
+
+jobs:
+  restart-service:
+    runs-on: self-hosted
+    steps:
+      - name: Create .env file from secret
+        run: echo "${{ secrets.ENV_FILE }}" > .env
+
+      - name: Create service_account.json file from secret
+        run: echo "${{ secrets.SERVICE_ACCOUNT_JSON }}" > service_account.json
+
+      - name: Restart Dinubot service
+        run: |
+          sudo systemctl restart dinubot