64 lines
2.2 KiB
YAML
64 lines
2.2 KiB
YAML
# 💡 全局变量块 46
|
|
variables:
|
|
- &APP_REGISTRY "push.lovestory.cyou"
|
|
- &APP_PULL_REGISTRY "registry.lovestory.cyou"
|
|
- &PROJECT_NAME "abhors/demo"
|
|
- &CONTAINER_NAME "demo-container"
|
|
- &DEPLOY_HOST "43.143.243.136"
|
|
- &DEPLOY_PORT "22"
|
|
- &DEPLOY_USER_SECRET "136_ssh_user"
|
|
- &DEPLOY_PASS_SECRET "136_ssh_password"
|
|
|
|
steps:
|
|
- name: Java 构建
|
|
image: library/maven:3.9.6-eclipse-temurin-17
|
|
pull: true
|
|
commands:
|
|
- mvn clean package -DskipTests
|
|
volumes:
|
|
- /tmp/maven-cache:/root/.m2
|
|
when:
|
|
event: [push, pull_request]
|
|
branch: master
|
|
|
|
- name: 镜像构建与推送
|
|
image: woodpeckerci/plugin-docker-buildx:latest
|
|
privileged: true
|
|
# ❌ 删除了这里的 environment 块，避免与 settings 冲突
|
|
settings:
|
|
# 直接使用 YAML 锚点组合成完整的 repo 地址
|
|
repo: push.lovestory.cyou/abhors/demo
|
|
# 💡 文档高级配置：通知内部 dockerd 引擎全面放开对不安全 HTTP 仓库的拦截
|
|
insecure: true
|
|
registry: *APP_REGISTRY
|
|
username:
|
|
from_secret: nexus_docker_username
|
|
password:
|
|
from_secret: nexus_docker_password
|
|
when:
|
|
event: push
|
|
branch: master
|
|
|
|
- name: 远程终端部署
|
|
image: registry.lovestory.cyou/appleboy/drone-ssh:latest
|
|
settings:
|
|
host: *DEPLOY_HOST
|
|
port: *DEPLOY_PORT
|
|
username:
|
|
from_secret: *DEPLOY_USER_SECRET
|
|
password:
|
|
from_secret: *DEPLOY_PASS_SECRET
|
|
secrets: [ nexus_docker_username, nexus_docker_password ]
|
|
envs: [ nexus_docker_username, nexus_docker_password ]
|
|
script:
|
|
- echo "========================================="
|
|
- echo "🚀 开始部署节点：*DEPLOY_HOST"
|
|
- echo "========================================="
|
|
- docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "registry.lovestory.cyou"
|
|
- docker stop "demo-container" || true
|
|
- docker rm "demo-container" || true
|
|
- docker pull "registry.lovestory.cyou/abhors/demo:latest"
|
|
- docker run -d --name "demo-container" -p 8080:8080 --restart always "registry.lovestory.cyou/abhors/demo:latest"
|
|
when:
|
|
event: push
|
|
branch: master |