ci: 部署工作流改为本地 runner 直跑版（免 SSH/Secrets） #65

wangziqi · 2026-08-09T13:42:07Z

wangziqi commented

2026-08-09 13:42:07 +00:00

改动

.gitea/workflows/deploy.yml 从 SSH+rsync 远程部署改为 self-hosted 本机直跑
不再依赖 SSH_PRIVATE_KEY/SSH_HOST/SSH_USER/SSH_PORT Secrets；只需服务器装好 runner + Node/PM2/MySQL + 仓库 clone
步骤：git pull → npm ci → build → migration:run → pm2 startOrReload --update-env → 健康检查
新增可选输入 seed_roles：首次部署/新增权限码时强制播种 RBAC，跑完自动去掉
.env 无需配到 Gitea，只放服务器部署目录

## 改动 - `.gitea/workflows/deploy.yml` 从 SSH+rsync 远程部署改为 **self-hosted 本机直跑** - 不再依赖 SSH_PRIVATE_KEY/SSH_HOST/SSH_USER/SSH_PORT Secrets；只需服务器装好 runner + Node/PM2/MySQL + 仓库 clone - 步骤：git pull → npm ci → build → migration:run → pm2 startOrReload --update-env → 健康检查 - 新增可选输入 `seed_roles`：首次部署/新增权限码时强制播种 RBAC，跑完自动去掉 - .env 无需配到 Gitea，只放服务器部署目录

wangziqi added 1 commit 2026-08-09 13:42:07 +00:00

ci(deploy): 部署工作流改为本地 runner 直跑版（免 SSH/Secrets）

CI / check (pull_request) Failing after 3m9s

Details

f0321b5bdd

- 移除 SSH/rsync 步骤与 SSH 相关 Secrets 依赖，runs-on: self-hosted 本机直跑
- 步骤：git pull → npm ci → build → migration:run → pm2 startOrReload --update-env → 健康检查
- 新增可选输入 seed_roles：首次部署/新增权限码时强制播种 RBAC，跑完自动去掉
- .env 无需配置到 Gitea，仅放服务器部署目录
- 注释说明 runner 在 docker 容器时的挂载与宿主 pm2 要求

wangziqi merged commit 29d987ab74 into main

2026-08-09 13:42:37 +00:00

wangziqi referenced this issue from a commit

2026-08-09 13:42:39 +00:00

Merge pull request 'ci: 部署工作流改为本地 runner 直跑版（免 SSH/Secrets）' (#65) from ci/local-runner-deploy into main

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: wangziqi/gongxue-base#65