feat(celld-deploy): add reusable Cloudflare Worker & Durable Objects celld deployment action
Update README Actions Table / update-readme (push) Successful in 6s
Update README Actions Table / update-readme (push) Successful in 6s
This commit is contained in:
Executable
+225
@@ -0,0 +1,225 @@
|
||||
#!/usr/bin/env bash
|
||||
set -euo pipefail
|
||||
|
||||
echo "🚀 Starting celld Worker & Durable Objects Deployment..."
|
||||
|
||||
# 1. Resolve repository, owner, and application directory
|
||||
FULL_REPO="${REPO_FULL_NAME:-$GITHUB_REPOSITORY}"
|
||||
OWNER="${REPO_OWNER:-$(dirname "$FULL_REPO")}"
|
||||
if [ -z "${REPO_NAME:-}" ]; then
|
||||
REPO_NAME=$(basename "$FULL_REPO")
|
||||
fi
|
||||
|
||||
if [ -n "${INPUT_APP_NAME:-}" ]; then
|
||||
case "$INPUT_APP_NAME" in
|
||||
*/*) APP_DIR_NAME="$INPUT_APP_NAME" ;;
|
||||
*) APP_DIR_NAME="${OWNER}/${INPUT_APP_NAME}" ;;
|
||||
esac
|
||||
else
|
||||
APP_DIR_NAME="$FULL_REPO"
|
||||
fi
|
||||
|
||||
CLEAN_APP=$(basename "$APP_DIR_NAME" | tr '_' '-' | tr '[:upper:]' '[:lower:]')
|
||||
ROUTER_NAME=$(echo "$CLEAN_APP" | tr -cd '[:alnum:]')
|
||||
|
||||
# 2. Resolve S3 bucket name
|
||||
RAW_BUCKET="${INPUT_BUCKET:-celld-${CLEAN_APP}}"
|
||||
BUCKET="${RAW_BUCKET#s3://}"
|
||||
BUCKET=$(echo "$BUCKET" | tr '_' '-' | tr '[:upper:]' '[:lower:]')
|
||||
|
||||
S3_ENDPOINT="${INPUT_S3_ENDPOINT:-https://s3.rodydavis.dev}"
|
||||
S3_ENDPOINT="${S3_ENDPOINT%/}"
|
||||
INTERNAL_S3_ENDPOINT="${INPUT_INTERNAL_S3_ENDPOINT:-http://minio-s3:9000}"
|
||||
INTERNAL_S3_ENDPOINT="${INTERNAL_S3_ENDPOINT%/}"
|
||||
S3_REGION="${INPUT_S3_REGION:-us-east-1}"
|
||||
|
||||
# 3. Resolve domain(s) and build Traefik Host() rule
|
||||
RAW_DOMAINS="${INPUT_DOMAIN:-${CLEAN_APP}.rodydavis.dev}"
|
||||
IFS=',' read -ra DOMAIN_ARR <<< "$RAW_DOMAINS"
|
||||
TRAEFIK_RULE=""
|
||||
PRIMARY_DOMAIN=""
|
||||
for d in "${DOMAIN_ARR[@]}"; do
|
||||
d_clean=$(echo "$d" | xargs | sed -E 's#^https?://##' | sed 's#/.*$##')
|
||||
if [ -z "$d_clean" ]; then continue; fi
|
||||
if [ -z "$PRIMARY_DOMAIN" ]; then PRIMARY_DOMAIN="$d_clean"; fi
|
||||
if [ -z "$TRAEFIK_RULE" ]; then
|
||||
TRAEFIK_RULE="Host(\`${d_clean}\`)"
|
||||
else
|
||||
TRAEFIK_RULE="${TRAEFIK_RULE} || Host(\`${d_clean}\`)"
|
||||
fi
|
||||
done
|
||||
|
||||
echo "📦 Application: ${APP_DIR_NAME}"
|
||||
echo "🪣 Fleet S3 Bucket: s3://${BUCKET} (${S3_ENDPOINT})"
|
||||
echo "🌐 Routing Rule: ${TRAEFIK_RULE}"
|
||||
|
||||
# 4. Ensure celld and esbuild binaries are on PATH
|
||||
if ! command -v celld >/dev/null 2>&1; then
|
||||
echo "⚙️ Installing celld CLI..."
|
||||
if command -v docker >/dev/null 2>&1 && docker image inspect ghcr.io/denoland/celld:latest >/dev/null 2>&1; then
|
||||
CID=$(docker create ghcr.io/denoland/celld:latest)
|
||||
docker cp "${CID}:/usr/local/bin/celld" /usr/local/bin/celld
|
||||
docker rm -f "$CID" >/dev/null
|
||||
chmod +x /usr/local/bin/celld
|
||||
else
|
||||
curl -fsSL https://celld.dev/install.sh | sh
|
||||
export PATH="$HOME/.local/bin:$PATH"
|
||||
fi
|
||||
fi
|
||||
echo "✅ Using $(celld --version)"
|
||||
|
||||
WORKDIR="${INPUT_WORKING_DIRECTORY:-.}"
|
||||
cd "$WORKDIR"
|
||||
|
||||
if [ -f "./node_modules/.bin/esbuild" ]; then
|
||||
export PATH="$(pwd)/node_modules/.bin:$PATH"
|
||||
fi
|
||||
|
||||
if ! command -v esbuild >/dev/null 2>&1; then
|
||||
echo "⚙️ Installing esbuild..."
|
||||
npm install -g esbuild --no-audit --no-fund >/dev/null 2>&1
|
||||
fi
|
||||
echo "✅ Using esbuild $(esbuild --version)"
|
||||
|
||||
# 5. Export AWS credentials for S3 and ensure fleet bucket exists
|
||||
export AWS_ACCESS_KEY_ID="$INPUT_S3_ACCESS_KEY"
|
||||
export AWS_SECRET_ACCESS_KEY="$INPUT_S3_SECRET_KEY"
|
||||
export AWS_DEFAULT_REGION="$S3_REGION"
|
||||
|
||||
EMPTY_SHA256="e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
|
||||
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
|
||||
--aws-sigv4 "aws:amz:${S3_REGION}:s3" \
|
||||
--user "${AWS_ACCESS_KEY_ID}:${AWS_SECRET_ACCESS_KEY}" \
|
||||
-H "x-amz-content-sha256: ${EMPTY_SHA256}" \
|
||||
-I "${S3_ENDPOINT}/${BUCKET}" || echo "000")
|
||||
|
||||
if [ "$HTTP_STATUS" = "404" ]; then
|
||||
echo "🪣 Creating S3 bucket '${BUCKET}' on ${S3_ENDPOINT}..."
|
||||
CREATE_STATUS=$(curl -s -o /dev/null -w "%{http_code}" \
|
||||
-X PUT \
|
||||
--aws-sigv4 "aws:amz:${S3_REGION}:s3" \
|
||||
--user "${AWS_ACCESS_KEY_ID}:${AWS_SECRET_ACCESS_KEY}" \
|
||||
-H "x-amz-content-sha256: ${EMPTY_SHA256}" \
|
||||
"${S3_ENDPOINT}/${BUCKET}")
|
||||
if [ "$CREATE_STATUS" != "200" ] && [ "$CREATE_STATUS" != "204" ] && [ "$CREATE_STATUS" != "409" ]; then
|
||||
echo "::error::Failed to create bucket '${BUCKET}' (HTTP ${CREATE_STATUS})"
|
||||
exit 1
|
||||
fi
|
||||
echo "✅ Created bucket s3://${BUCKET}"
|
||||
elif [ "$HTTP_STATUS" = "200" ]; then
|
||||
echo "✅ Verified existing bucket s3://${BUCKET}"
|
||||
else
|
||||
echo "⚠️ Bucket probe returned HTTP ${HTTP_STATUS}; proceeding with celld deploy..."
|
||||
fi
|
||||
|
||||
# 6. Deploy Worker bundle & assets directly to S3 bucket
|
||||
echo "📤 Deploying Worker bundle to s3://${BUCKET}..."
|
||||
celld deploy . \
|
||||
--bucket "s3://${BUCKET}" \
|
||||
--endpoint "${S3_ENDPOINT}" \
|
||||
--region "${S3_REGION}"
|
||||
|
||||
# 7. Ensure celld Fleet Daemon is provisioned and running on TrueNAS
|
||||
HOST="${INPUT_HOST:-10.0.0.218}"
|
||||
USER="${INPUT_USER:-root}"
|
||||
NETWORK="${INPUT_NETWORK:-apps-net}"
|
||||
ENTRYPOINTS="${INPUT_ENTRYPOINTS:-web}"
|
||||
IDLE_EVICT_S="${INPUT_IDLE_EVICT_S:-60}"
|
||||
LTX_RETENTION_SECS="${INPUT_LTX_RETENTION_SECS:-86400}"
|
||||
DEPLOY_POLL_S="${INPUT_DEPLOY_POLL_S:-5}"
|
||||
|
||||
STAGING_DIR=$(mktemp -d)
|
||||
trap 'rm -rf "$STAGING_DIR" ~/.ssh/truenas_deploy_key' EXIT
|
||||
|
||||
{
|
||||
echo "AWS_ACCESS_KEY_ID=${INPUT_S3_ACCESS_KEY}"
|
||||
echo "AWS_SECRET_ACCESS_KEY=${INPUT_S3_SECRET_KEY}"
|
||||
if [ -n "${INPUT_ENV_CONTENT:-}" ]; then
|
||||
printf "%s\n" "$INPUT_ENV_CONTENT"
|
||||
fi
|
||||
} > "${STAGING_DIR}/.env"
|
||||
|
||||
if [ -f "docker-compose.yml" ]; then
|
||||
cp "docker-compose.yml" "${STAGING_DIR}/docker-compose.yml"
|
||||
elif [ -f "docker-compose.yaml" ]; then
|
||||
cp "docker-compose.yaml" "${STAGING_DIR}/docker-compose.yml"
|
||||
else
|
||||
cat <<EOF > "${STAGING_DIR}/docker-compose.yml"
|
||||
services:
|
||||
celld:
|
||||
image: ghcr.io/denoland/celld:latest
|
||||
container_name: ${CLEAN_APP}-celld
|
||||
restart: unless-stopped
|
||||
env_file:
|
||||
- .env
|
||||
environment:
|
||||
- CELLD_NODE=${CLEAN_APP}-truenas-1
|
||||
- CELLD_WATCH=/var/lib/celld/state
|
||||
- CELLD_IDLE_EVICT_S=${IDLE_EVICT_S}
|
||||
- CELLD_LTX_RETENTION_SECS=${LTX_RETENTION_SECS}
|
||||
- CELLD_DEPLOY_POLL_S=${DEPLOY_POLL_S}
|
||||
volumes:
|
||||
- ./data:/var/lib/celld
|
||||
command:
|
||||
- --bucket=s3://${BUCKET}
|
||||
- --endpoint=${INTERNAL_S3_ENDPOINT}
|
||||
- --region=${S3_REGION}
|
||||
- --listen=0.0.0.0:8080
|
||||
- --internal-listen=127.0.0.1:8081
|
||||
- --advertise=127.0.0.1:8081
|
||||
networks:
|
||||
- ${NETWORK}
|
||||
labels:
|
||||
- "traefik.enable=true"
|
||||
- "traefik.http.routers.${ROUTER_NAME}.rule=${TRAEFIK_RULE}"
|
||||
- "traefik.http.routers.${ROUTER_NAME}.entrypoints=${ENTRYPOINTS}"
|
||||
- "traefik.http.services.${ROUTER_NAME}.loadbalancer.server.port=8080"
|
||||
|
||||
networks:
|
||||
${NETWORK}:
|
||||
external: true
|
||||
EOF
|
||||
fi
|
||||
|
||||
mkdir -p ~/.ssh
|
||||
echo "$INPUT_SSH_KEY" > ~/.ssh/truenas_deploy_key
|
||||
chmod 600 ~/.ssh/truenas_deploy_key
|
||||
ssh-keyscan -H "$HOST" >> ~/.ssh/known_hosts 2>/dev/null
|
||||
|
||||
REMOTE_DIR="/mnt/jupiter/apps/${APP_DIR_NAME}"
|
||||
ssh -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${USER}@${HOST}" "mkdir -p ${REMOTE_DIR}/data"
|
||||
|
||||
LOCAL_ENV_HASH=$(sha256sum "${STAGING_DIR}/.env" | awk '{print $1}')
|
||||
LOCAL_COMPOSE_HASH=$(sha256sum "${STAGING_DIR}/docker-compose.yml" | awk '{print $1}')
|
||||
|
||||
REMOTE_STATE=$(ssh -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${USER}@${HOST}" "
|
||||
ENV_H=\$(sha256sum ${REMOTE_DIR}/.env 2>/dev/null | awk '{print \$1}' || echo 'none')
|
||||
COMP_H=\$(sha256sum ${REMOTE_DIR}/docker-compose.yml 2>/dev/null | awk '{print \$1}' || echo 'none')
|
||||
RUNNING=\$(docker inspect -f '{{.State.Running}}' ${CLEAN_APP}-celld 2>/dev/null || echo 'false')
|
||||
echo \"\${ENV_H}:\${COMP_H}:\${RUNNING}\"
|
||||
")
|
||||
|
||||
if [ "$REMOTE_STATE" != "${LOCAL_ENV_HASH}:${LOCAL_COMPOSE_HASH}:true" ]; then
|
||||
echo "🚢 Updating TrueNAS celld container stack at ${REMOTE_DIR}..."
|
||||
scp -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${STAGING_DIR}/.env" "${USER}@${HOST}:${REMOTE_DIR}/.env"
|
||||
scp -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${STAGING_DIR}/docker-compose.yml" "${USER}@${HOST}:${REMOTE_DIR}/docker-compose.yml"
|
||||
ssh -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${USER}@${HOST}" "chmod 600 ${REMOTE_DIR}/.env && cd ${REMOTE_DIR} && docker compose up -d --remove-orphans"
|
||||
sleep 3
|
||||
else
|
||||
echo "⚡ TrueNAS container ${CLEAN_APP}-celld is already running with matching config; hot-reloading bundle in place!"
|
||||
fi
|
||||
|
||||
# 8. Optional D1 SQLite migrations
|
||||
if [ -n "${INPUT_D1_DATABASE:-}" ] && [ -d "migrations" ]; then
|
||||
echo "🗄️ Applying D1 migrations for database '${INPUT_D1_DATABASE}'..."
|
||||
ssh -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${USER}@${HOST}" "rm -rf ${REMOTE_DIR}/data/migrations && mkdir -p ${REMOTE_DIR}/data/migrations"
|
||||
scp -r -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no migrations/. "${USER}@${HOST}:${REMOTE_DIR}/data/migrations/"
|
||||
ssh -i ~/.ssh/truenas_deploy_key -o StrictHostKeyChecking=no "${USER}@${HOST}" "
|
||||
docker exec -w /var/lib/celld ${CLEAN_APP}-celld celld d1 migrations apply '${INPUT_D1_DATABASE}' \
|
||||
--bucket 's3://${BUCKET}' \
|
||||
--endpoint '${INTERNAL_S3_ENDPOINT}' \
|
||||
--region '${S3_REGION}'
|
||||
"
|
||||
fi
|
||||
|
||||
echo "✅ Successfully deployed ${APP_DIR_NAME} to https://${PRIMARY_DOMAIN}"
|
||||
Reference in New Issue
Block a user