From abc49d3c937b1878233bbfd9c7b69aa3c6a73e6b Mon Sep 17 00:00:00 2001 From: v4ltages Date: Fri, 8 Aug 2025 22:58:09 +0300 Subject: [PATCH 1/3] Use secret for runner --- .github/workflows/build.yml | 6 ++++++ .github/workflows/deploy.yml | 3 +++ 2 files changed, 9 insertions(+) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 49f8333..cf5e5e0 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -7,6 +7,12 @@ jobs: build: runs-on: prox-1 steps: + - name: Configure sudo password + run: echo '${{ secrets.USER_AUTH }}' | sudo -S echo "Sudo configured" + + - name: Clear .next cache + run: sudo rm -rf $GITHUB_WORKSPACE/.next + - name: Checkout code uses: actions/checkout@v4 diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index e80d24f..9aac070 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -7,6 +7,9 @@ jobs: deploy: runs-on: prox-1 steps: + - name: Configure sudo password + run: echo '${{ secrets.USER_AUTH }}' | sudo -S echo "Sudo configured" + - name: Restart NextJS service run: sudo systemctl restart nextjs.service From 2d8ab8c920702bbff71d2a3470117d05d05089f7 Mon Sep 17 00:00:00 2001 From: v4ltages Date: Fri, 8 Aug 2025 23:08:37 +0300 Subject: [PATCH 2/3] Try different approach --- .github/workflows/build.yml | 7 ++++++- .github/workflows/deploy.yml | 7 ++++++- .github/workflows/main.yml | 4 ++++ 3 files changed, 16 insertions(+), 2 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index cf5e5e0..98adf25 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -2,13 +2,18 @@ name: build on: workflow_call: + secrets: + USER_AUTH: + required: true jobs: build: runs-on: prox-1 steps: - name: Configure sudo password - run: echo '${{ secrets.USER_AUTH }}' | sudo -S echo "Sudo configured" + env: + SUDO_PASSWORD: ${{ secrets.USER_AUTH }} + run: echo "$SUDO_PASSWORD" | sudo -S echo "Sudo configured" - name: Clear .next cache run: sudo rm -rf $GITHUB_WORKSPACE/.next diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 9aac070..97afba3 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -2,13 +2,18 @@ name: deploy on: workflow_call: + secrets: + USER_AUTH: + required: true jobs: deploy: runs-on: prox-1 steps: - name: Configure sudo password - run: echo '${{ secrets.USER_AUTH }}' | sudo -S echo "Sudo configured" + env: + SUDO_PASSWORD: ${{ secrets.USER_AUTH }} + run: echo "$SUDO_PASSWORD" | sudo -S echo "Sudo configured" - name: Restart NextJS service run: sudo systemctl restart nextjs.service diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 27dc6d0..9f6a43f 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -8,7 +8,11 @@ on: jobs: build: uses: ./.github/workflows/build.yml + secrets: + USER_AUTH: ${{ secrets.USER_AUTH }} deploy: needs: build uses: ./.github/workflows/deploy.yml + secrets: + USER_AUTH: ${{ secrets.USER_AUTH }} From 087d94557b2adefbc3d680a0e51e939d5e6ea3af Mon Sep 17 00:00:00 2001 From: v4ltages Date: Fri, 8 Aug 2025 23:17:08 +0300 Subject: [PATCH 3/3] attempt 2 --- .github/workflows/build.yml | 7 ++----- .github/workflows/deploy.yml | 15 ++++++++------- 2 files changed, 10 insertions(+), 12 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 98adf25..9170261 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,13 +10,10 @@ jobs: build: runs-on: prox-1 steps: - - name: Configure sudo password + - name: Clear .next cache env: SUDO_PASSWORD: ${{ secrets.USER_AUTH }} - run: echo "$SUDO_PASSWORD" | sudo -S echo "Sudo configured" - - - name: Clear .next cache - run: sudo rm -rf $GITHUB_WORKSPACE/.next + run: echo "$SUDO_PASSWORD" | sudo -S rm -rf $GITHUB_WORKSPACE/.next - name: Checkout code uses: actions/checkout@v4 diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 97afba3..9350e14 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -10,16 +10,17 @@ jobs: deploy: runs-on: prox-1 steps: - - name: Configure sudo password + - name: Restart NextJS service env: SUDO_PASSWORD: ${{ secrets.USER_AUTH }} - run: echo "$SUDO_PASSWORD" | sudo -S echo "Sudo configured" - - - name: Restart NextJS service - run: sudo systemctl restart nextjs.service + run: echo "$SUDO_PASSWORD" | sudo -S systemctl restart nextjs.service - name: Reload systemd daemon - run: sudo systemctl daemon-reload + env: + SUDO_PASSWORD: ${{ secrets.USER_AUTH }} + run: echo "$SUDO_PASSWORD" | sudo -S systemctl daemon-reload - name: Check service status - run: sudo systemctl status nextjs.service --no-pager + env: + SUDO_PASSWORD: ${{ secrets.USER_AUTH }} + run: echo "$SUDO_PASSWORD" | sudo -S systemctl status nextjs.service --no-pager