deploy.yml

name: Deploy UburNode

on:
  workflow_dispatch:
  push:
    branches:
      - main

permissions:
  contents: read

env:
  DEPLOY_DIR: /opt/uburnode
  # 服务器侧用 SSH 拉代码（需已配置 ~/.ssh/config 或默认可用的 GitHub 部署钥）
  GIT_REPO: git@github.com:fulai-tech/UburPython.git
  DEPLOY_BRANCH: main

jobs:
  deploy:
    runs-on: ubuntu-latest
    concurrency:
      group: uburnode-deploy
      cancel-in-progress: true

    steps:
      - name: Validate required secrets
        run: |
          test -n "${{ secrets.SSH_HOST }}" || (echo "Missing SSH_HOST" && exit 1)
          test -n "${{ secrets.SSH_USER }}" || (echo "Missing SSH_USER" && exit 1)
          test -n "${{ secrets.SSH_PRIVATE_KEY }}" || (echo "Missing SSH_PRIVATE_KEY" && exit 1)

      - name: Deploy on server
        uses: appleboy/ssh-action@v1.2.0
        with:
          host: ${{ secrets.SSH_HOST }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_PRIVATE_KEY }}
          port: ${{ secrets.SSH_PORT || 22 }}
          command_timeout: 90m
          script: |
            set -euo pipefail
            DEPLOY_DIR="${{ secrets.DEPLOY_PATH || env.DEPLOY_DIR }}"
            GIT_REPO="${{ env.GIT_REPO }}"
            DEPLOY_BRANCH="${{ secrets.DEPLOY_BRANCH || env.DEPLOY_BRANCH }}"

            if [ ! -d "$DEPLOY_DIR/.git" ]; then
              if [ -d "$DEPLOY_DIR" ] && [ -n "$(ls -A "$DEPLOY_DIR" 2>/dev/null)" ]; then
                echo "错误: $DEPLOY_DIR 已存在但不是 git 仓库。"
                echo "请备份 .env 后: rm -rf $DEPLOY_DIR && git clone -b $DEPLOY_BRANCH $GIT_REPO $DEPLOY_DIR"
                exit 1
              fi
              mkdir -p "$DEPLOY_DIR"
              git clone -b "$DEPLOY_BRANCH" "$GIT_REPO" "$DEPLOY_DIR"
            fi

            cd "$DEPLOY_DIR"
            # 统一为 SSH remote；本地改动一律丢弃，强制对齐远程 DEPLOY_BRANCH
            git remote set-url origin "$GIT_REPO"
            git fetch --all --prune
            # -f 必须：否则工作区有改动（如 docker-compose.yml）时 checkout 会直接失败
            git checkout -f -B "$DEPLOY_BRANCH" "origin/$DEPLOY_BRANCH"
            git reset --hard "origin/$DEPLOY_BRANCH"
            # 清理会挡住检出的未跟踪文件，但保留 .env / logs（部署机本地配置与日志）
            git clean -fd -e .env -e .env.* -e logs -e logs/

            if [ ! -f .env ]; then
              echo "缺少 $DEPLOY_DIR/.env，请从 .env.example 复制并填写后重试"
              exit 1
            fi

            docker compose up -d --build --remove-orphans
            docker image prune -f
            docker compose ps