db deployment trace

.woodpecker/db.yml

@@ -32,13 +32,32 @@ steps:
     image: alpine:latest
     depends_on: [ secrets ]
     commands:
+      - set -euo pipefail
+      - apk add --no-cache bash openssh-client rsync coreutils
+      - set -a
+      - . ./ci/prod/.env.runtime
+      - . ./.env.version
+      - set +a
+      - mkdir -p /root/.ssh
+      - install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
+      - SSH_OPTS='-i /root/.ssh/id_rsa -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -vv'
+      - REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
+      - REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
+      # sync
+      - ssh $SSH_OPTS "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
+      - rsync -avz --delete -e "ssh $SSH_OPTS" ci/prod/compose/  "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
+      - rsync -avz             -e "ssh $SSH_OPTS" ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
+      # deploy on remote via heredoc
       - |
-          set -euo
+        ssh $SSH_OPTS "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" bash -s <<'EOSSH'
-          apk add --no-cache bash openssh-client rsync
+        set -Eeuxo pipefail
-          set -a
+        cd "${REMOTE_DIR}/compose"
-          . ./ci/prod/.env.runtime
+        set -a
-          . ./.env.version
+        . ../env/.env.runtime
-          set +a
+        set +a
-          mkdir -p /root/.ssh
+        docker compose -f db.yml pull
-          install -m 600 secrets/SSH_KEY /root/.ssh/id_rsa
+        docker compose -f db.yml up -d --remove-orphans
-          bash ci/prod/scripts/deploy-db.sh
+        docker compose ps
+        date -Is | tee .last_deploy
+        logger -t deploy-db "db deployed at $(date -Is) in ${REMOTE_DIR}"
+        EOSSH