72 lines
3.1 KiB
YAML
72 lines
3.1 KiB
YAML
# .woodpecker.yaml
|
||
|
||
# 🛑 终极完全体开关：无论项目、私服、部署机器怎么变，只改这 6 行！
|
||
environment:
|
||
# 1. 业务与私服配置（已换成本地真实自建域名）
|
||
APP_REGISTRY: "push.lovestory.cyou" # 👈 镜像推送走专属通道
|
||
APP_PULL_REGISTRY: "registry.lovestory.cyou" # 👈 远程136机器拉取走加速总门户
|
||
PROJECT_NAME: "abhors/demo"
|
||
CONTAINER_NAME: "demo-container"
|
||
|
||
# 2. 远程部署机器配置
|
||
DEPLOY_HOST: "43.143.243.136" # 👈 你的腾讯云 136 服务器 IP
|
||
DEPLOY_PORT: 22 # 👈 SSH 端口
|
||
DEPLOY_USER_SECRET: "136_ssh_user" # 👈 对应系统 Secret 里的用户名别名
|
||
DEPLOY_PASS_SECRET: "136_ssh_password" # 👈 对应系统 Secret 里的密码别名
|
||
|
||
steps:
|
||
- name: Java 构建
|
||
# 💡 隐式拦截：这里不加任何域名，Woodpecker宿主机会通过本地daemon.json自动走registry.lovestory.cyou下载并秒级缓存
|
||
image: library/maven:3.9.6-eclipse-temurin-17
|
||
pull: true
|
||
commands:
|
||
- mvn clean package -DskipTests
|
||
volumes:
|
||
- /tmp/maven-cache:/root/.m2
|
||
when:
|
||
event: [push, pull_request]
|
||
branch: master
|
||
|
||
- name: 镜像构建与推送
|
||
image: woodpeckerci/plugin-docker-buildx:latest
|
||
volumes:
|
||
- /var/run/docker.sock:/var/run/docker.sock
|
||
settings:
|
||
repo: ${APP_REGISTRY}/${PROJECT_NAME}
|
||
registry: ${APP_REGISTRY}
|
||
username:
|
||
from_secret: nexus_docker_username
|
||
password:
|
||
from_secret: nexus_docker_password
|
||
when:
|
||
event: push
|
||
branch: master
|
||
|
||
- name: 远程终端部署
|
||
# 💡 完美闭环：这里直接走你的私服拉取，刚才通过 1ms 毫秒源缓存下来的插件，这里将是“秒拉”
|
||
image: registry.lovestory.cyou/appleboy/drone-ssh:latest
|
||
settings:
|
||
host: ${DEPLOY_HOST}
|
||
port: ${DEPLOY_PORT}
|
||
username:
|
||
from_secret: ${DEPLOY_USER_SECRET}
|
||
password:
|
||
from_secret: ${DEPLOY_PASS_SECRET}
|
||
|
||
# 安全传递与跨网传输
|
||
secrets: [ nexus_docker_username, nexus_docker_password ]
|
||
envs: [ nexus_docker_username, nexus_docker_password, APP_REGISTRY, APP_PULL_REGISTRY, PROJECT_NAME, CONTAINER_NAME ]
|
||
script:
|
||
- echo "========================================="
|
||
- echo "🚀 开始部署节点：${DEPLOY_HOST}"
|
||
- echo "========================================="
|
||
# 📦 远程 136 机器由于通过 Group 组仓（registry.）更能享受到本地缓存的红利
|
||
- docker login --username "$nexus_docker_username" --password "$nexus_docker_password" "$APP_PULL_REGISTRY"
|
||
- docker stop "$CONTAINER_NAME" || true
|
||
- docker rm "$CONTAINER_NAME" || true
|
||
# 💡 细节优化：136机器拉取时，由于你的Hosted仓已经聚合在Group仓里，所以136直接走registry.lovestory.cyou拉取即可
|
||
- docker pull "$APP_PULL_REGISTRY"/"$PROJECT_NAME":latest
|
||
- docker run -d --name "$CONTAINER_NAME" -p 8080:8080 --restart always "$APP_PULL_REGISTRY"/"$PROJECT_NAME":latest
|
||
when:
|
||
event: push
|
||
branch: master |