chore(docker): compose 增加日志轮转上限并补充令牌密钥占位符 #957
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Deploy Server | |
| on: | |
| # 推送时执行 | |
| push: | |
| branches: [dev] | |
| # 可手动执行 | |
| workflow_dispatch: | |
| permissions: | |
| contents: read | |
| # 部署不可中途取消（避免容器重建被打断），连续触发时排队执行 | |
| concurrency: | |
| group: deploy-server | |
| cancel-in-progress: false | |
| jobs: | |
| deploy: | |
| name: Deploy server | |
| runs-on: self-hosted | |
| timeout-minutes: 30 | |
| steps: | |
| # 1、检出源码 | |
| - name: Checkout | |
| uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 | |
| # 2、打包（容器内构建：mvnw/pom 插件/注解处理器等构建期代码不触达宿主机， | |
| # 不挂 docker.sock、不注入 job secrets；/root/.m2 挂载复用依赖缓存） | |
| - name: Build | |
| run: > | |
| docker run --rm | |
| --memory=6g --cpus=4 | |
| -v "$PWD":/ws -v /root/.m2:/root/.m2 -w /ws | |
| maven:3.9-eclipse-temurin-17 | |
| ./mvnw -B package | |
| # 3、同步到服务器部署目录（runner 与部署机同机，本地 rsync 即可） | |
| # 说明：lib/ 与 bin/ 为纯构建产物，用 --delete 清理升级后遗留的旧依赖/旧 jar， | |
| # 防止宿主 lib/ 堆积导致 classpath 多版本共存（如 snail-job 三代同存）； | |
| # Dockerfile/config/ 等其他部署产物在上游 commit 后于 runner 上被 Post Checkout | |
| # 清走，故不用整目录 --delete，改用不带删除的普通同步保留它们。 | |
| - name: Copy | |
| run: | | |
| rsync -a --delete continew-server/target/app/lib/ ${{ secrets.SERVER_PATH }}/continew-admin/lib/ | |
| rsync -a --delete continew-server/target/app/bin/ ${{ secrets.SERVER_PATH }}/continew-admin/bin/ | |
| rsync -a continew-server/target/app/ --exclude='lib/' --exclude='bin/' ${{ secrets.SERVER_PATH }}/continew-admin/ | |
| # 5、启动 | |
| - name: Start | |
| run: | | |
| cd ${{ secrets.SERVER_PATH }} | |
| docker-compose up --force-recreate --build -d continew-server | |
| docker images | grep none | awk '{print $3}' | xargs -r docker rmi |