enuxia-quiz/.gitea/workflows/deploy.yml

name: Deploy Pi

on:
  workflow_run:
    workflows: ["Build & Push"]
    types: [completed]

jobs:
  deploy:
    runs-on: [deploy-app]
    if: ${{ gitea.event.workflow_run.conclusion == 'success' }}
    steps:
      - name: Setup SSH
        run: |
          mkdir -p ~/.ssh
          echo "${{ secrets.SSH_PRIVATE_KEY }}" > ~/.ssh/deploy_key
          chmod 600 ~/.ssh/deploy_key
          ssh-keyscan -H ${{ secrets.PI_HOST }} >> ~/.ssh/known_hosts

      - name: Deploy sur le Pi
        run: |
          ssh -i ~/.ssh/deploy_key ${{ secrets.PI_USER }}@${{ secrets.PI_HOST }} \
            "docker login git.enuxia.fr -u luuna -p ${{ secrets.REGISTRY_TOKEN }} && \
             docker pull git.enuxia.fr/enuxia-public/enuxia-quiz:latest && \
             docker compose -f /opt/enuxia-quiz/docker-compose.yml --env-file /opt/enuxia-quiz/.env up -d --force-recreate && \
             docker logout git.enuxia.fr"

      - name: Cleanup SSH
        if: always()
        run: rm -f ~/.ssh/deploy_key