Files
atproto-pds-ansible/.gitea/workflows/deploy.yml
T
govandLetta Code ec09b49282
Deploy PDS / deploy (push) Canceled after 0s
feat: add PDS backup service with rclone + S3
Three backup types: pre-update (Watchtower lifecycle hook),
pre-deploy (Ansible task), and periodic (systemd timer).
All uploads go to OVH S3 via rclone. Backs up SQLite DBs,
pds.env, and Caddy config.

👾 Generated with [Letta Code](https://letta.com)

Co-Authored-By: Letta Code <noreply@letta.com>
2026-08-04 18:00:34 -04:00

52 lines
1.3 KiB
YAML

name: Deploy PDS
on:
push:
branches:
- main
jobs:
deploy:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Install Ansible
run: |
sudo apt-get update -qq
sudo apt-get install -y -qq ansible
- name: Write SSH key
env:
SSH_PRIVATE_KEY: ${{ secrets.SSH_PRIVATE_KEY }}
run: |
mkdir -p ~/.ssh
echo "$SSH_PRIVATE_KEY" > ~/.ssh/id_ed25519
chmod 600 ~/.ssh/id_ed25519
ssh-keyscan -H ${{ vars.SERVER_IP }} >> ~/.ssh/known_hosts
- name: Generate inventory
run: |
cat > inventory.yml <<EOF
all:
hosts:
pds:
ansible_host: ${{ vars.SERVER_IP }}
EOF
- name: Generate vars
run: |
cat > vars/main.yml <<EOF
pds_hostname: ${{ vars.PDS_HOSTNAME }}
pds_admin_email: ${{ vars.PDS_ADMIN_EMAIL }}
pds_blobstore_s3_access_key: ${{ secrets.OVH_S3_ACCESS_KEY }}
pds_blobstore_s3_secret_key: ${{ secrets.OVH_S3_SECRET_KEY }}
pds_backup_s3_access_key: ${{ secrets.OVH_S3_ACCESS_KEY }}
pds_backup_s3_secret_key: ${{ secrets.OVH_S3_SECRET_KEY }}
EOF
- name: Run playbook
run: |
ansible-playbook -i inventory.yml playbook.yml