31 lines
1.3 KiB
Bash
Executable File
31 lines
1.3 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
: "${REMOTE_BASE:?missing REMOTE_BASE}"
|
|
: "${DB_DIR:?missing DB_DIR}"
|
|
: "${SSH_USER:?missing SSH_USER}"
|
|
: "${SSH_HOST:?missing SSH_HOST}"
|
|
|
|
REMOTE_DIR="${REMOTE_BASE%/}/${DB_DIR}"
|
|
REMOTE_TARGET="${SSH_USER}@${SSH_HOST}"
|
|
ssh -o StrictHostKeyChecking=no "$REMOTE_TARGET" "mkdir -p ${REMOTE_DIR}/{compose,env}"
|
|
rsync -avz --delete ci/prod/compose/ "$REMOTE_TARGET:${REMOTE_DIR}/compose/"
|
|
rsync -avz ci/prod/.env.runtime "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.runtime"
|
|
rsync -avz ci/prod/env/.env.lock.db "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.lock.db"
|
|
rsync -avz secrets/REGISTRY_USER "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.registry.user"
|
|
rsync -avz secrets/REGISTRY_PASS "$REMOTE_TARGET:${REMOTE_DIR}/env/.env.registry.pass"
|
|
scp -o StrictHostKeyChecking=no .env.lock "$REMOTE_TARGET:${REMOTE_DIR}/.env.lock"
|
|
ssh -o StrictHostKeyChecking=no "$REMOTE_TARGET" REMOTE_DIR="$REMOTE_DIR" <<'EOSSH'
|
|
set -euo pipefail
|
|
cd "${REMOTE_DIR}/compose"
|
|
set -a
|
|
. ../env/.env.runtime
|
|
. ../env/.env.lock.db
|
|
export REGISTRY_USER="$(cat ../env/.env.registry.user)"
|
|
export REGISTRY_PASS="$(cat ../env/.env.registry.pass)"
|
|
echo "${REGISTRY_PASS}" | docker login "${REGISTRY_URL}" --username "${REGISTRY_USER}" --password-stdin >/dev/null
|
|
set +a
|
|
docker compose -f db.yml pull
|
|
docker compose -f db.yml up -d --remove-orphans
|
|
EOSSH
|